replicant-vendor_replicant/sepolicy
d34d 79eda9ebb8 sepolicy: Put theme service in its own context
Allow the theme manager and its data to be sandboxed in
its own context

Change-Id: I7898663d1c196bfe04fa4c539d20191a43fde284
2016-08-02 12:15:34 -07:00
..
qcom sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
app.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
auditd.te selinux: Add rules for the audit daemon 2014-11-09 17:20:54 +00:00
bootanim.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
domain.te sepolicy: Remove some denials 2015-11-16 19:46:00 -08:00
drmserver.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
file_contexts sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
file.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
fsck_untrusted.te cm: sepolicy: fix denials for external storage 2016-01-01 17:30:27 +01:00
genfs_contexts sepolicy: Revert custom sdcardfs policy in favor of AOSP 2016-07-26 18:43:41 -07:00
healthd.te selinux: Fix healthd's access to /dev nodes 2014-11-27 22:57:21 +00:00
hostapd.te vendor: add policies for netd 2014-11-29 23:33:52 -08:00
init.te sepolicy: Add permission for formatting user/cache partition 2015-12-16 10:41:51 -08:00
installd.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
kernel.te sepolicy: Fix MTP for sdcardfs 2016-07-29 21:25:15 -07:00
livedisplay.te cm: sepolicy: Create standard policy for LiveDisplay 2015-09-15 15:31:19 -07:00
mac_permissions.xml sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
mediaserver.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
mkfs.te sepolicy: Add domain for mkfs binaries 2015-12-16 10:40:28 -08:00
netd.te vendor: add policies for netd 2014-11-29 23:33:52 -08:00
platform_app.te sepolicy: Allow batterymanager and batteryproperties services to be found 2016-07-23 20:51:04 -07:00
property_contexts SELinux: Use custom ADB over network property 2015-12-16 11:01:50 -08:00
property.te sepolicy: allow userinit to set its property 2015-02-09 21:03:35 +00:00
recovery.te sepolicy: Allow recovery to mount on tmpfs 2016-04-22 13:09:37 -07:00
seapp_contexts sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
sepolicy.mk sepolicy: remove BOARD_SEPOLICY_UNION 2015-10-07 12:49:00 -07:00
service_contexts cm: Add CMAudioService the platform 2016-04-26 16:41:19 -07:00
service.te cm: Add CMAudioService the platform 2016-04-26 16:41:19 -07:00
su.te cm: sepolicy: allow kernel to read storage 2016-02-20 14:26:41 -08:00
sysinit.te sepolicy: Permissions for userinit 2015-03-17 12:12:59 +00:00
system_app.te sepolicy: Allow system app to set boot anim property 2015-09-21 18:16:18 -07:00
system_server.te cm: sepolicy: Allow system_server dir read access 2016-07-28 20:21:24 -07:00
system.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
themeservice_app.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
ueventd.te cm: sepolicy: Allow ueventd to load WiFi and audio irmware 2014-04-05 14:56:09 -07:00
uncrypt.te sepolicy: Allow uncrypt additional access 2016-05-16 13:29:06 -07:00
userinit.te sepolicy: Permissions for userinit 2015-03-17 12:12:59 +00:00
vold.te sepolicy: Allow minivold execute_no_trans 2016-01-02 02:07:18 -08:00
zygote.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00