| 15036550075ffa46ffdf0d6816eb19d03f9027c1 |
|
03-Mar-2015 |
Nick Kralevich <nnk@google.com> |
am 59e06d3a: am 98fdff61: am 56fde9e7: Merge "SELinuxPolicyInstallReceiver: Prevent partial or mixed policy updates."
* commit '59e06d3ab479ab04df84b783cb119f032549f492':
SELinuxPolicyInstallReceiver: Prevent partial or mixed policy updates.
|
| 08c7116ab9cd04ad6dd3c04aa1017237e7f409ac |
|
28-Feb-2015 |
John Spurlock <jspurlock@google.com> |
Remove unused imports in frameworks/base.
Change-Id: I031443de83f93eb57a98863001826671b18f3b17
/frameworks/base/services/core/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java
|
| e9dc17233f25483298186b0521874bf962e3f10e |
|
27-Feb-2015 |
Stephen Smalley <sds@tycho.nsa.gov> |
SELinuxPolicyInstallReceiver: Prevent partial or mixed policy updates.
The current SELinuxPolicyInstallReceiver logic can yield a partial
or mixed (old and new) set of policy files under /data/security/current
if there is an error or a crash at certain points before completing
the installation of the update.
Rewrite the logic to avoid the possibility of such partial or mixed
policy updates by using rename on the entire directory of policy
files rather than operating on a per-file basis. Also separate
the extraction of the policy files from the bundle into their own
temporary directory. Make sure we delete any previous temporary directory
or backup directory before using them for this update. Drop the
use of a symlink for /data/security/current altogether; it provides
no benefit.
Change-Id: I564af01c2c3ca1531c216013b8724c7511f32de8
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
/frameworks/base/services/core/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java
|
| 50ece5ec53661a51ce5a15f782fdcd747171bc02 |
|
12-Jun-2014 |
Nick Kralevich <nnk@google.com> |
am 9a0485aa: am 1ef888e5: Merge "Add service_contexts to policy update bundles."
* commit '9a0485aa567c99157e45d08e9712a281f34ffc5f':
Add service_contexts to policy update bundles.
|
| 332f35813e9860b8469b0f804f2b576daa0c823f |
|
31-May-2014 |
Nick Kralevich <nnk@google.com> |
am 89b88f22: am 3a9835d4: Merge "Allow SELinuxPolicyInstallReceiver to update new policy files."
* commit '89b88f226928e269e84100154bc78c0f8dc2016e':
Allow SELinuxPolicyInstallReceiver to update new policy files.
|
| 3ce4f3d0af8b20f915631ab927aafa76a6105135 |
|
28-Apr-2014 |
Elliott Hughes <enh@google.com> |
am 685a0a72: am bbd87eb9: Merge "Track libcore.os\' move to android.system."
* commit '685a0a72d445515167a2071330679cdf9b53a62d':
Track libcore.os' move to android.system.
|
| 9a492393dfb69050b2a4a8b5205e8d2fc24fcd43 |
|
22-Apr-2014 |
Nick Kralevich <nnk@google.com> |
am 5246f459: am d267c1a0: Merge "remove unneeded import statements."
* commit '5246f4599a0c9978012ffb1049307704b5027a0b':
remove unneeded import statements.
|
| 9158825f9c41869689d6b1786d7c7aa8bdd524ce |
|
22-Nov-2013 |
Amith Yamasani <yamasani@google.com> |
Move some system services to separate directories
Refactored the directory structure so that services can be optionally
excluded. This is step 1. Will be followed by another change that makes
it possible to remove services from the build.
Change-Id: Ideacedfd34b5e213217ad3ff4ebb21c4a8e73f85
/frameworks/base/services/core/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java
|