Max Bires e1bed673f2 Removing qti from permissive mode ...

Bug: 34784662
Test: qti is in enforcing mode and the device functions normally
Change-Id: Ief42b66b97ecc17690197e283ca3d6d5ff8e93e1

2017-04-24 22:36:49 -07:00

..

adsprpcd.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

audioserver.te

Bring up binderized Audio and Soundtrigger services on new Pixels

2017-03-30 11:19:37 -07:00

bluetooth.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

bootanim.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

cameraserver.te

Adding rules and contexts for following denials

2017-03-22 10:56:52 -07:00

chre.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

cnd.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

device.te

Merge "Add eSE daemon."

2017-04-12 12:38:03 +00:00

domain.te

Fixing the following denials

2017-04-11 01:26:29 -07:00

dumpstate.te

Add wahoo dumpstate and sepolicy with smlog

2017-03-30 02:53:48 +00:00

esed.te

Merge "Add OemLock and Weaver HAL server policies for esed."

2017-04-18 14:50:47 +00:00

file_contexts

Adding allows to fix perfd and setup_wizard denials

2017-04-24 23:24:20 +00:00

file.te

Add selinux rules for dumping usb debugfs logs

2017-04-21 18:38:38 +00:00

folio_daemon.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

gatekeeperd.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

genfs_contexts

Fixing the following denials

2017-04-11 01:26:29 -07:00

hal_audio_default.te

Remove unnecessary sepolicy attributes

2017-04-12 18:52:16 -07:00

hal_bluetooth_default.te

Adding allows to fix following denials during run/boot time

2017-04-03 00:23:03 +00:00

hal_bootctl.te

Refactoring block device labeling and adding allows.

2017-04-07 16:11:19 -07:00

hal_camera_default.te

Annotate violators of "no Binder in vendor" rule

2017-03-24 08:40:00 -07:00

hal_camera.te

Add cameraserver and NFC HAL to socket comms violators list

2017-03-30 18:00:38 -07:00

hal_contexthub.te

Add binderized context hub HAL

2017-04-03 11:49:09 -07:00

hal_drm_default.te

Adding file_contexts and allows that stopped boot in enforcing.

2017-04-19 15:35:38 -07:00

hal_dumpstate_impl.te

Add selinux rules for dumping usb debugfs logs

2017-04-21 18:38:38 +00:00

hal_fingerprint_default.te

Annotate violators of "no Binder in vendor" rule

2017-03-24 08:40:00 -07:00

hal_fingerprint.te

Adding allows to handle the following denials

2017-04-10 15:39:09 -07:00

hal_gatekeeper_qti.te

Fixing boot blocking selinux policy.

2017-04-24 21:54:01 +00:00

hal_gatekeeper.te

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

hal_graphics_composer_default.te

Fixing the following denials

2017-04-11 01:26:29 -07:00

hal_keymaster_qti.te

Fixing boot blocking selinux policy.

2017-04-24 21:54:01 +00:00

hal_memtrack_default.te

Fixing the following run and boot time denials

2017-04-02 19:07:17 -07:00

hal_nfc_default.te

nfc: sepolicy: creates data/vendor/nfc/ for HAL specific data

2017-03-31 12:02:03 -07:00

hal_power_default.te

Adding allows to handle the following denials.

2017-04-04 16:37:57 +00:00

hal_rcsservice.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

hal_thermal_default.te

Enable binderized Thermal HAL.

2017-04-06 16:23:51 +02:00

hal_usb_default.te

Adding allows to handle the following denials.

2017-04-04 16:37:57 +00:00

hal_vibrator_default.te

Fixing the following denials

2017-04-11 01:26:29 -07:00

hal_vr.te

VR hal to choose thermal config

2017-04-21 11:21:57 -07:00

hal_wifi_default.te

Adding allows to handle the following denials

2017-04-10 15:39:09 -07:00

hwservice_contexts

Grant device-specific hwservicemanager access

2017-04-21 13:06:23 -07:00

hwservice.te

Grant device-specific hwservicemanager access

2017-04-21 13:06:23 -07:00

ims.te

Moving these into permissive so global enforcing can be turned on.

2017-04-23 11:52:02 -07:00

imscm.te

Moving these into permissive so global enforcing can be turned on.

2017-04-23 11:52:02 -07:00

init_power.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

init_radio.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

init-devstart-sh.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

init-insmod-sh.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

init-ipastart-sh.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

init.te

Refactoring block device labeling and adding allows.

2017-04-07 16:11:19 -07:00

ioctl_defines

Adding ism service allow rules and according ioctl_define

2017-03-16 22:10:52 +00:00

ioctl_macros

Import common file from device specific directory

2017-03-04 23:34:45 -08:00

irsc_util.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

kernel.te

Adding file_contexts and allows that stopped boot in enforcing.

2017-04-19 15:35:38 -07:00

keystore.te

declare keystore and vold as passthrough HAL clients of keymaster

2017-04-19 15:03:10 -07:00

location.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

logger_app.te

Merge changes Ice91de09,I0d05425d

2017-04-12 17:34:44 +00:00

mediacodec.te

Adding allows to fix perfd and setup_wizard denials

2017-04-24 23:24:20 +00:00

netmgrd.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00

pd_services.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

per_mgr.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

per_proxy.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

perfd.te

Adding allows to fix perfd and setup_wizard denials

2017-04-24 23:24:20 +00:00

platform_app.te

Move logging folder from data to data/vendor

2017-04-10 17:25:14 -07:00

port-bridge.te

Added allowing at_device to port-bridge.

2017-04-24 14:12:49 -07:00

property_contexts

VR hal to choose thermal config

2017-04-21 11:21:57 -07:00

property.te

VR hal to choose thermal config

2017-04-21 11:21:57 -07:00

qlogd.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

qmuxd.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

qti.te

Removing qti from permissive mode

2017-04-24 22:36:49 -07:00

radio.te

Merge "Moving these into permissive so global enforcing can be turned on."

2017-04-23 20:00:11 +00:00

ramdump_app.te

sepolicy: Allow ramdump_app to access surfaceflinger_service

2017-04-11 15:23:34 -07:00

ramdump.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

rfs_access.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

rild.te

Grant device-specific hwservicemanager access

2017-04-21 13:06:23 -07:00

rmt_storage.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

seapp_contexts

Move logging folder from data to data/vendor

2017-04-10 17:25:14 -07:00

sensors.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

service_contexts

IMS: Define sepolicies for UCE

2017-04-14 17:58:55 -07:00

service.te

IMS: Define sepolicies for UCE

2017-04-14 17:58:55 -07:00

smlog_dump.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

ssr_detector.te

Move logging folder from data to data/vendor

2017-04-10 17:25:14 -07:00

ssr_diag.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

ssr_setup.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

subsystem_ramdump.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

surfaceflinger.te

Adding allow rules and contexts to handle the following denials

2017-04-07 19:57:13 +00:00

system_app.te

Grant device-specific hwservicemanager access

2017-04-21 13:06:23 -07:00

system_server.te

Adding allows to handle the following denials

2017-04-10 15:39:09 -07:00

tee.te

Fixing the following denials

2017-04-11 01:26:29 -07:00

thermal-engine.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

time_daemon.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

ueventd.te

Fixing the following denials

2017-04-11 01:26:29 -07:00

untrusted_app.te

Fixing camera app not launching

2017-04-24 19:56:38 -07:00

update_engine_common.te

Fixing denials for OTAs

2017-04-17 11:39:48 -07:00

update_verifier.te

Refactoring block device labeling and adding allows.

2017-04-07 16:11:19 -07:00

vold.te

Fixing boot blocking selinux policy.

2017-04-24 21:54:01 +00:00

wcnss_filter.te

make all vendor exec_types part of vendor_file_type

2017-04-15 19:23:59 -07:00

wcnss_service.te

tag all vendor domains that rely on system executables

2017-04-15 19:30:07 -07:00