| 9822c1d08f11c9fb98a6f2530ba693285fe12f2b |
|
19-Sep-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
am 66a3e8d9: Drop the use of a policy version suffix on the sepolicy file.
* commit '66a3e8d91ef6098dd7cab127530f1cdb7973f53e':
Drop the use of a policy version suffix on the sepolicy file.
|
| 66a3e8d91ef6098dd7cab127530f1cdb7973f53e |
|
18-Sep-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Drop the use of a policy version suffix on the sepolicy file.
The policy version suffix support was carried over from conventional
Linux distributions, where we needed to support simultaneous installation
of multiple kernels and policies. This isn't required for Android, so
get rid of it and thereby simplify the policy pathname.
We still default to generating a specific policy version (the highest
one supported by the emulator kernel), but this can be overridden
by setting POLICYVERS on the make command-line or in the environment.
Requires a corresponding change to libselinux.
Change-Id: I40c88e13e8063ea37c2b9ab5b3ff8b0aa595402a
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/external/sepolicy/Android.mk
|
| d0f027ccc8f4a7aa8d872df9a195197590f234dc |
|
06-Sep-2012 |
Jean-Baptiste Queru <jbq@google.com> |
am 10f9a372: Merge upstream sepolicy into AOSP
* commit '10f9a3727a5c46ef23f5f0385ae4ffec20cb46d9':
Corrected gramatical issues
Added new line to end of file
Changed seapp_contexts temporary file naming
Fix mls checking code
Support overrides in seapp_contexts
Add tf_daemon labeling support.
Add ppp/mtp policy.
per device seapp_context support
dhcp policy.
Trusted Execution Environment policy.
|
| 98ed392e68e041340ca8881ebf0a3cdf6bd5e880 |
|
05-Sep-2012 |
William Roberts <w.roberts@sta.samsung.com> |
Changed seapp_contexts temporary file naming
Change-Id: I4f522869eeaa6f84771e4ee2328f65296dcc29db
/external/sepolicy/Android.mk
|
| 0ae3a8a2d50799d0b91d992434cdd4d3151b0348 |
|
04-Sep-2012 |
William Roberts <w.roberts@sta.samsung.com> |
Fix mls checking code
Change-Id: I614caa520e218f8f148eef641fed2301571da8e1
/external/sepolicy/Android.mk
|
| f0e0a94e032e55c13bc54f1cffe243f04872278e |
|
28-Aug-2012 |
William Roberts <w.roberts@sta.samsung.com> |
Support overrides in seapp_contexts
Provides support for overriding seapp_contexts declerations
in per device seapp_contexts files.
Change-Id: I23a0ffa1d24f1ce57825b168f29a2e885d3e1c51
/external/sepolicy/Android.mk
|
| 171a06257124401af2e7c33fbbcbc69c18e45486 |
|
16-Aug-2012 |
William Roberts <bill.c.roberts@gmail.com> |
per device seapp_context support
/external/sepolicy/Android.mk
|
| aa7fb3be1b456a2884c3fa707aa590196b2c70c3 |
|
13-Aug-2012 |
Jean-Baptiste Queru <jbq@google.com> |
resolved conflicts for merge of 0c2e5705 to jb-mr1-dev
Change-Id: Iee1d877788b9397ca29a6cfe7bc3015c3edbe5ac
|
| b19665c39da76c0e24c8cd9583e30c4a50567510 |
|
30-Jul-2012 |
rpcraig <rpcraig@tycho.ncsc.mil> |
Add mac_permissions.xml file.
This was moved from external/mac-policy.git
/external/sepolicy/Android.mk
|
| af56ac19545ff083ceb3c1ddf4bf8e2663d4b934 |
|
17-Jul-2012 |
Matt Finifter <finifter@google.com> |
Include su.te only for userdebug/eng builds.
Change-Id: Ia544f13910abbe5e9f6a6cafae397415a41a7a94
/external/sepolicy/Android.mk
|
| dc1072365e99cef38e0d234989ba29e0e2df2b4c |
|
12-Jul-2012 |
William Roberts <bill.c.roberts@gmail.com> |
Support for ocontexts per device.
ocontexts was split up into 4 files:
1.fs_use
2.genfs_contexts
3.initial_sid_contexts
4.port_contexts
Each file has their respective declerations in them.
Devices, in their respective device directory, can now specify sepolicy.fs_use, sepolicy.genfs_contexts, sepolicy.port_contexts, and sepolicy.initial_sid_contexts. These declerations will be added right behind their respective sepolicy counterparts in the concatenated configuration file.
/external/sepolicy/Android.mk
|
| 70d4fc2243721a54cd177959e05cf81b54c4e226 |
|
20-Jun-2012 |
Joshua Brindle <jbrindle@tresys.com> |
Add selinux network script to policy
Signed-off-by: Joshua Brindle <jbrindle@tresys.com>
/external/sepolicy/Android.mk
|
| efd6d6e0dab97a49706f1116dde2ec87257f79c1 |
|
18-May-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Apply m4 to file_contexts and property_contexts to support includes.
/external/sepolicy/Android.mk
|
| f5f899c3c0f684ffba6950b343e652abd78d0fd9 |
|
10-Apr-2012 |
The Android Open Source Project <initial-contribution@android.com> |
Merge from upstream sepolicy
Change-Id: I99085d575e3d884fb04ac03ac998eb3c53eb2d9f
|
| f4ea5b25399e4c6a10aa353b0c3d40564f78e89c |
|
10-Apr-2012 |
Ying Wang <wangying@google.com> |
Use the checkpolicy built from source.
Change-Id: I22f49db3d59b50ed8975d8c1146bb9c322adbf7e
/external/sepolicy/Android.mk
|
| 124720a6976a69357522299afbe5591854e40775 |
|
04-Apr-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Add policy for property service.
New property_contexts file for property selabel backend.
New property.te file with property type declarations.
New property_service security class and set permission.
Allow rules for setting properties.
/external/sepolicy/Android.mk
|
| 64935c7d87ce76ed542e16fce3dde9883b507d7a |
|
06-Mar-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Limit per-device policy files to a well-defined sepolicy prefix.
Avoid any future collisions with the use of .fc or .te suffixes in the
per-device directories. If we want multiple file support, add a separate
subdirectory for sepolicy files.
/external/sepolicy/Android.mk
|
| 5b340befb4f964365c856606050254a65df909d1 |
|
06-Mar-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Add support for per-device .te and .fc files.
/external/sepolicy/Android.mk
|
| 7e8cf24f58651228029eb4e53e4094a86f4d2bdb |
|
02-Feb-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Do not build if HAVE_SELINUX=false.
/external/sepolicy/Android.mk
|
| 2b826fcbe8231bf13affd63dbed865b315e1eddc |
|
24-Jan-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
Add a dependency on checkpolicy.
/external/sepolicy/Android.mk
|
| 02fb5f3c6abbb7f12c278a04966314d06f6378e3 |
|
18-Jan-2012 |
Ying Wang <wangying@google.com> |
Rewrite Android.mk.
/external/sepolicy/Android.mk
|
| 2dd4e51d5c2a2dfc0bfdee9303269f5a665f6e35 |
|
04-Jan-2012 |
Stephen Smalley <sds@tycho.nsa.gov> |
SE Android policy.
/external/sepolicy/Android.mk
|