Adnan Begovic
c3d3969971
vendor/cm: Fix up service contexts for sepolicy.
...
Change-Id: Ibb04e967bd027c6d1118b8b471ec328c3b034d9d
9 years ago
Ricardo Cerqueira
b026605629
sepolicy: Underp the context for persistent storage
...
The dir's context need love, too
TICKET: CYNGNOS-1185
Change-Id: I659b3ba06079825fe850cf66858a9d98b5f61c46
9 years ago
Steve Kondik
b5dbbdf9cb
cm: sepolicy: Create standard policy for LiveDisplay
...
Change-Id: Icb0047f261861c8fae99ffa4e9053de8d3aa8c73
9 years ago
Steve Kondik
a385501738
cm: SELinux policy for persistent properties API
...
* Set up persistent properties for devices with a /persist partition.
Change-Id: I78974dd4e25831338462c91fc25e36e343795510
9 years ago
Emerson Pinter
dc699fb190
sepolicy: Permissions for userinit
...
Change-Id: Icaf9d191841a6214925729e40d84a61a2ebf2296
9 years ago
Ricardo Cerqueira
c75446d072
sepolicy: Split off /cache/recovery's permissions
...
/cache/recovery is used by 2 domains: recovery and updater apps. Separate
its perms from the rest of /cache and grant them to those 2 clients
Change-Id: Iacde60744c07423f9876c2f8e3da900543e38ddf
10 years ago
Georg Veichtlbauer
2ccd36c73f
sepolicy: allow userinit to set its property
...
Change-Id: I9d8270d889566d169077a1b1fdaee43059d11ee1
10 years ago
Dan Pasanen
afbfad59d6
sepolicy: new label for io scheduler sysfs nodes
...
* needed for io scheduler in performance settings
Change-Id: I818340ed62e3e1dd2674b93340b31723c7a985f4
10 years ago
Ricardo Cerqueira
a7dfa18fd5
sepolicy: Add policies for the new superuser sockets.
...
Change-Id: Ia3e1044616bee95eb4774254fb098487d983b5db
10 years ago
Konsta
444ce4a6b1
cm: Remove KSM permissions
...
CM12 doesn't have a KSM setting in performance settings anymore.
KSM should be configured and enabled on device basis.
Change-Id: I98a0cbe1b01a659eb28bcd459be55d78a88bda86
10 years ago
Andy Mast
f274019100
selinux: New rw privileges for themes
...
- New theme_data_file context for files under /data/system/theme
- Permit systemserver to create files/dirs under /data/resource-cache
- Permit systemserver to create files/dirs under /data/system/theme
Change-Id: Id597fc20b477ea395a8631623f26a7edde280799
10 years ago
Roman Birg
20114d672c
cm: add sepolicy entry for lockscreen wallpaper
...
Change-Id: Ie779392ab8118d192873a01ec5c7de3e5938ed17
Signed-off-by: Roman Birg <roman@cyngn.com>
10 years ago
Tom Marshall
39a4244c77
cm: sepolicy: Add contexts for cm recovery
...
* Allow setup of secure adb (setup_adbd)
* minivold in recovery
Change-Id: Id1243154f4016b59e54890404cadea46a2aad212
10 years ago
Ricardo Cerqueira
fa63e50707
selinux: Add a rule to label the extended keyhandler dex files
...
These should be treated as regular dex cache files, but they're
expanded outside of the normal cache dir
Change-Id: Id046e1b90116b35d2e7817ed4717fcef78135f08
10 years ago
Ricardo Cerqueira
09159ac7ce
Add selinux policies for superuser
...
Change-Id: I878eaa9d25feaedf46e89083f91d6a21f4aff37a
10 years ago
myfluxi
12daaee8a5
vendor: Update SELinux policy for sysinit
...
Change-Id: I41d4c25d9d6246cd2ca0a8ff3b5a4e114e3bc4d4
10 years ago
Ricardo Cerqueira
15df17f9ac
selinux: Add rules for the audit daemon
...
Change-Id: I050a9ef39d58d2592d880d225d45eb64d8a40b7b
10 years ago
Steve Kondik
fdf1aff5ad
cm: policy for ipv6 tethering
...
* Enable use of radish via netd for ipv6 tethering
Change-Id: Ifa0e85686fc70f59c089ca40a78cea9935820185
10 years ago
Steve Kondik
002b4f0a4f
cm: sepolicy: Allow ueventd to properly handle cpufreq changes
...
* We need to allow relabeling since these files can pop in and out if
the governor is changed.
Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2
10 years ago
Ricardo Cerqueira
ac8d09538e
selinux: Add CM-specific file_contexts
...
Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05
11 years ago