grapheneos/platform_system_sepolicy issues and pull requests

#65 - 15: remove leftover compat policy, simplify Updater app domain; add LogViewer app domain

Pull Request - State: closed - Opened by muhomorr about 1 month ago

#64 - add domain for LogViewer app

Pull Request - State: closed - Opened by muhomorr about 1 month ago

#63 - 15: allow system_server to get and set deny_new_usb2_prop

Pull Request - State: closed - Opened by muhomorr about 1 month ago

#62 - allow system_server to get and set deny_new_usb2_prop

Pull Request - State: closed - Opened by muhomorr about 1 month ago

#61 - android-security-13.0.0_r21

Pull Request - State: closed - Opened by muhomorr 2 months ago

#60 - 15 09 04 sepolicy

Pull Request - State: closed - Opened by muhomorr 2 months ago

#59 - pre-15 cleanup

Pull Request - State: closed - Opened by muhomorr 2 months ago

#58 - add property contexts for alternative touchscreen mode

Pull Request - State: closed - Opened by muhomorr 5 months ago

#57 - add policy for deny_new_usb2 sysctl and its system property

Pull Request - State: closed - Opened by muhomorr 5 months ago

#56 - 14 qpr3 sepolicy

Pull Request - State: closed - Opened by muhomorr 5 months ago

#55 - add policy for sys.erase_secure_element system property; allow vold to securely erase system DE storage encryption key

Pull Request - State: closed - Opened by muhomorr 6 months ago

#54 - Allow system_server to call IKeystoreMaintenance.deleteAllKeys()

Pull Request - State: closed - Opened by muhomorr 6 months ago

#53 - allow radio domain to find mediametrics_service

Pull Request - State: closed - Opened by muhomorr 8 months ago

#52 - 14 qpr2 port

Pull Request - State: closed - Opened by quh4gko8 9 months ago

#51 - add policy for persist.security.usb_mode system property

Pull Request - State: closed - Opened by muhomorr 9 months ago

#50 - allow init to use wake_alarm capability; allow system_server to set sys.auto_reboot_ctl property

Pull Request - State: closed - Opened by muhomorr 10 months ago

#49 - 14 pre qpr1 sepolicy

Pull Request - State: closed - Opened by muhomorr 12 months ago

#48 - drop base system app domain splits; allow dumpstate to read dropbox_data_file on user builds

Pull Request - State: closed - Opened by muhomorr 12 months ago

#47 - fixup! use levelFrom=all for update client app

Pull Request - State: closed - Opened by quh4gko8 about 1 year ago

#46 - 14 sepolicy

Pull Request - State: closed - Opened by quh4gko8 about 1 year ago - 1 comment

#45 - Prepare for 14 porting of sepolicy commits + remove more unused selinux rules for Google variants of APEXes

Pull Request - State: closed - Opened by quh4gko8 over 1 year ago

#44 - 13 qpr3 sepolicy

Pull Request - State: closed - Opened by muhomorr over 1 year ago

#43 - set persist.sys.gnss_psds context to exported_system_prop

Pull Request - State: closed - Opened by muhomorr over 1 year ago

#42 - 13 sepolicy

Pull Request - State: closed - Opened by quh4gko8 about 2 years ago

#41 - SELinux policies

Pull Request - State: closed - Opened by dd-dreams about 2 years ago - 10 comments

#40 - disable unused vzwomatrigger_app domain

Pull Request - State: closed - Opened by flawedworld over 2 years ago

#39 - attempt at fix

Pull Request - State: closed - Opened by flawedworld over 2 years ago

#38 - allow system to use persist.tcp_timestamp_disable

Pull Request - State: closed - Opened by flawedworld about 3 years ago

#37 - allow system to use persist.tcp_random_isns

Pull Request - State: closed - Opened by flawedworld about 3 years ago

#36 - sepolicy

Pull Request - State: closed - Opened by Flex1911 about 3 years ago

#35 - deny_new_usb sysctl and system property policy

Pull Request - State: closed - Opened by flawedworld about 3 years ago - 1 comment

#34 - 12 selinux features

Pull Request - State: closed - Opened by flawedworld about 3 years ago

#33 - [12] label protected_{fifos,regular} as proc_security

Pull Request - State: closed - Opened by kdrag0n about 3 years ago

#32 - Required changes for native debugging toggle past-feature

Pull Request - State: closed - Opened by flawedworld over 3 years ago

#31 - Fix "remove base system app tmpfs execute"

Pull Request - State: closed - Opened by randomhydrosol over 3 years ago

#30 - fix missed prebuilts update

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago - 1 comment

#29 - add isolated_base_app type to compatibility mapping

Pull Request - State: closed - Opened by inthewaves about 4 years ago

#28 - Remove unused verify apps policies

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago

#27 - remove unused domains for apps we don't ship

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago - 1 comment

#26 - remove tmpfs execute from several domains

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago - 1 comment

#26 - remove tmpfs execute from several domains

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago - 1 comment

#25 - rest of the selinux hardening

Pull Request - State: closed - Opened by randomhydrosol about 4 years ago - 1 comment

#24 - APEX breaking commits

Pull Request - State: closed - Opened by flawedworld about 4 years ago - 3 comments