Skip to content
Snippets Groups Projects
  1. Apr 06, 2015
    • Andres Morales's avatar
      SELinux permissions for gatekeeper TEE proxy · e207986e
      Andres Morales authored
      sets up:
      - execute permissions
      - binder permission (system_server->gatekeeper->keystore)
      - prevents dumpstate and shell from finding GK binder service
      - neverallow rules for prohibited clients
      
      Change-Id: I1817933a91de625db469a20c7a4c8e2ca46efa1e
      e207986e
  2. Apr 03, 2015
    • dcashman's avatar
      Add system_api_service and app_api_service attributes. · d12993f0
      dcashman authored
      System services differ in designed access level.  Add attributes reflecting this
      distinction and label services appropriately.  Begin moving access to the newly
      labeled services by removing them from tmp_system_server_service into the newly
      made system_server_service attribute.  Reflect the move of system_server_service
      from a type to an attribute by removing access to system_server_service where
      appropriate.
      
      Change-Id: I7fd06823328daaea6d6f96e4d6bd00332382230b
      d12993f0
  3. Mar 27, 2015
  4. Mar 25, 2015
  5. Mar 19, 2015
  6. Jan 29, 2015
  7. Jan 14, 2015
    • dcashman's avatar
      Make system_server_service an attribute. · 4a89cdfa
      dcashman authored
      Temporarily give every system_server_service its own
      domain in preparation for splitting it and identifying
      special services or classes of services.
      
      Change-Id: I81ffbdbf5eea05e0146fd7fd245f01639b1ae0ef
      4a89cdfa
  8. Dec 08, 2014
  9. Nov 26, 2014
    • dcashman's avatar
      Remove entropy from service_contexts. · 69636551
      dcashman authored
      Commit: 9287e0dd272b85b475e33bcbd7d868517a0f98f9 removed the registration
      of EntropyMixer with servicemanager, so it no longer needs a context.
      
      Bug: 18106000
      
      Cherry-pick of commit: 7cfef98c
      
      Change-Id: I9aeb35e7ffde75090f4234ea193514fb883b1425
      69636551
  10. Sep 10, 2014
    • Tyler Gunn's avatar
      Renaming Telecomm to Telecom. · 69cdca91
      Tyler Gunn authored
      - Changing package from android.telecomm to android.telecom
      - Changing package from com.android.telecomm to
      com.android.server.telecomm.
      - Renaming TelecommManager to TelecomManager.
      
      Bug: 17364651
      Change-Id: I70e9ecdab7482327f25387ecc6223f46e9cbe10e
      69cdca91
  11. Jul 29, 2014
  12. Jul 28, 2014
  13. Jul 21, 2014
  14. Jul 17, 2014
  15. Jul 16, 2014
  16. Jul 09, 2014
  17. Jul 01, 2014
    • Riley Spahn's avatar
      Add imms service and system_app_service type. · b1ec3dfa
      Riley Spahn authored
      Map imms to system_app_service in service_contexts and add
      the system_app_service type and allow system_app to add the
      system_app_service.
      
      Bug: 16005467
      Change-Id: I06ca75e2602f083297ed44960767df2e78991140
      b1ec3dfa
  18. Jun 27, 2014
    • Riley Spahn's avatar
      Preemptively adding services for pending commits. · 182498e8
      Riley Spahn authored
      Adding services to service_contexts for the
      pending commits Icf5997dd6a6ba5e1de675cf5f4334c78c2c037f1
      and Ibe79be30b80c18ec45ff69db7527c7a4adf0ee08.
      
      Change-Id: Ie898866d1ab3abba6211943e87bcec77ba568567
      182498e8
  19. Jun 26, 2014
  20. Jun 25, 2014
  21. Jun 17, 2014
    • Riley Spahn's avatar
      Add missing services to service_contexts. · 3f06ad96
      Riley Spahn authored
      Add missing services to service_contexts that we did not include
      in earlier patch that added SELinux checks in service_manager.
      
      Change-Id: I889d999bf0b745bfcb75a3553b207777dc5700b7
      3f06ad96
  22. Jun 12, 2014
    • Riley Spahn's avatar
      Add SELinux rules for service_manager. · f90c41f6
      Riley Spahn authored
      Add a service_mananger class with the verb add.
      Add a type that groups the services for each of the
      processes that is allowed to start services in service.te
      and an attribute for all services controlled by the service
      manager. Add the service_contexts file which maps service
      name to target label.
      
      Bug: 12909011
      Change-Id: I017032a50bc90c57b536e80b972118016d340c7d
      f90c41f6
Loading