Menu ▾ ▴

Tree [2eb393] aosp-8.1-r7 /
 History

HTTPS git://
HTTPS access

File Date Author Commit
 README.md 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 addrsetup.te 2018-01-09 LuK1337 LuK1337 [ca20ff] sepolicy: Use vendor_file_type for executables ...
 adsprpcd.te 2018-01-10 LuK1337 LuK1337 [afa0da] sepolicy: Use vendor_file_type for executables ...
 appdomain.te 2017-12-18 Humberto Borba Humberto Borba [4acfba] sony: sepolicy: Allow appdomain reading thermal...
 audioserver.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 bluetooth.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 cameraserver.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 cnss-daemon.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 device.te 2017-11-21 David David [a98e4a] sepolicy: avoid denials for new fpc
 domain.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 file.te 2018-01-02 Humberto Borba Humberto Borba [fd63e4] sony: sepolicy: Add label for location data fil...
 file_contexts 2018-01-14 oshmoun oshmoun [2f4153] sepolicy: location: add gnss service policy
 fsck.te 2017-12-16 Humberto Borba Humberto Borba [4fa6c9] sony: sepolicy: Address dsp denials
 gatekeeperd.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 genfs_contexts 2017-12-13 Humberto Borba Humberto Borba [b4a354] sony: sepolicy: Label sysfs for hal_graphics_co...
 hal_audio_default.te 2017-12-01 Humberto Borba Humberto Borba [d49a5d] sony: sepolicy: Address hal_audio_default denials
 hal_bluetooth_default.te 2018-01-06 David David [cbec7c] sepolicy: remove deprecated service
 hal_camera_default.te 2017-12-09 David David [1067d4] sepolicy: avoid cam denials
 hal_drm_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_fingerprint_default.te 2017-12-01 Humberto Borba Humberto Borba [dc1dae] sony: sepolicy: Address hal_fingerprint_default...
 hal_gatekeeper_default.te 2018-01-05 David David [e691a6] sepolicy: avoid some denials
 hal_gnss_qti.te 2018-01-14 oshmoun oshmoun [2f4153] sepolicy: location: add gnss service policy
 hal_graphics_allocator_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_graphics_composer_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_keymaster_default.te 2018-01-05 David David [e691a6] sepolicy: avoid some denials
 hal_light_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_memtrack_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_nfc_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_power_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_sensors_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_usb_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 hal_wifi_default.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 init.te 2017-12-16 Humberto Borba Humberto Borba [4fa6c9] sony: sepolicy: Address dsp denials
 ioctl_defines 2017-08-25 Alin Jerpelea Alin Jerpelea [dee387] fix initial Sepolicy denials
 ioctl_macros 2017-08-25 Alin Jerpelea Alin Jerpelea [dee387] fix initial Sepolicy denials
 irsc_util.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 kernel.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 location.te 2018-01-05 David David [6a909a] sepolicy: avoid location denials
 mediacodec.te 2017-12-12 Humberto Borba Humberto Borba [9e2a6f] sony: sepolicy: Address mediacodec denials
 mediaextractor.te 2017-12-14 Humberto Borba Humberto Borba [cf8941] sony: sepolicy: Allow playing music from sdcard
 mlog_qmi.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 msm_irqbalanced.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 netd.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 netmgrd.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 nfc.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 odmcheck.te 2018-01-09 LuK1337 LuK1337 [ca20ff] sepolicy: Use vendor_file_type for executables ...
 pd_services.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 per_mgr.te 2018-01-10 LuK1337 LuK1337 [afa0da] sepolicy: Use vendor_file_type for executables ...
 per_proxy.te 2017-11-25 Adam Farden Adam Farden [c46f1c] Allow per_mgr access to sys_msm_sybsys
 platform_app.te 2017-11-23 David David [43da7c] sepolicy: Allow nfc service access
 property.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 property_contexts 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 qmuxd.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 radio.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 rdclean.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 rild.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 rmt_storage.te 2017-12-01 Humberto Borba Humberto Borba [61bfd2] sony: sepolicy: Address rmt_storage denials
 sct.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 seapp_contexts 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 sensors.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 sepolicy.mk 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 service.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 service_contexts 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 shell.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 surfaceflinger.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 system_app.te 2018-01-10 David David [4a4a4d] sepolicy: allow settings read kernel version
 system_server.te 2018-01-10 oshmoun oshmoun [d72191] system_server: allow writing to timerslack_ns
 ta_qmi.te 2018-01-10 LuK1337 LuK1337 [afa0da] sepolicy: Use vendor_file_type for executables ...
 tad.te 2018-01-10 LuK1337 LuK1337 [afa0da] sepolicy: Use vendor_file_type for executables ...
 te_macros 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 tee.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 thermanager.te 2018-01-09 LuK1337 LuK1337 [ca20ff] sepolicy: Use vendor_file_type for executables ...
 timekeep.te 2018-01-09 LuK1337 LuK1337 [ca20ff] sepolicy: Use vendor_file_type for executables ...
 ueventd.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 untrusted_app_all.te 2017-11-25 Adam Farden Adam Farden [daf56e] Don't audit zram stats
 vndservice.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 vndservice_contexts 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 vold.te 2017-11-20 Adam Farden Adam Farden [14fe40] Rewrite sepolicy using wahoo as a style guide
 wcnss_service.te 2018-01-10 LuK1337 LuK1337 [afa0da] sepolicy: Use vendor_file_type for executables ...

Read Me

sepolicy for SODP

This sepolicy is suitable for SODP supported devices when building on AOSP. Where
possible, we follow the structure, style, and naming conventions found in the sepolicy
written for Google devices. The current best comparison is the wahoo sepolicy.

When submitting patches please include the following in the commit message:

  1. The AVC denial you wish to resolve
  2. Why you think this is the correct sepolicy
  3. Steps to reproduce the denial
  4. Ping @AdFad666 for review.

Failure to include the above may result in your patch being rejected.

This sepolicy also requires device specific file_contexts and genfs_contexts
that can be found in each platform's git repository.

MongoDB Logo MongoDB