replicant-vendor_replicant/sepolicy
Wolfgang Wiedmeyer f14027ae6b
sepolicy: set fsck_untrusted to permissive in recovery
Breaks installation from SD card in some cases otherwise.

Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
2017-06-16 23:32:12 +02:00
..
qcom cm: Allow LiveDisplay to write to display misc dir 2016-08-15 01:43:06 -07:00
app.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
auditd.te selinux: Add rules for the audit daemon 2014-11-09 17:20:54 +00:00
bootanim.te Merge branch 'cm-13.0' of https://github.com/CyanogenMod/android_vendor_cm into replicant-6.0 2016-12-12 13:09:51 +01:00
domain.te sepolicy: Remove some denials 2015-11-16 19:46:00 -08:00
drmserver.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
file_contexts sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
file.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
fsck_untrusted.te cm: sepolicy: fix denials for external storage 2016-01-01 17:30:27 +01:00
genfs_contexts sepolicy: Revert custom sdcardfs policy in favor of AOSP 2016-07-26 18:43:41 -07:00
healthd.te selinux: Fix healthd's access to /dev nodes 2014-11-27 22:57:21 +00:00
hostapd.te vendor: add policies for netd 2014-11-29 23:33:52 -08:00
init.te sepolicy: Add permission for formatting user/cache partition 2015-12-16 10:41:51 -08:00
installd.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
kernel.te sepolicy: Fix MTP for sdcardfs 2016-07-29 21:25:15 -07:00
livedisplay.te sepolicy: Move new QCOM-specific policy to the right place 2016-08-09 00:07:19 -07:00
mac_permissions.xml readd mac_permissions.xml from LineageOS 2017-05-02 20:01:24 +02:00
mediaserver.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
mkfs.te sepolicy: Add domain for mkfs binaries 2015-12-16 10:40:28 -08:00
netd.te vendor: add policies for netd 2014-11-29 23:33:52 -08:00
platform_app.te sepolicy: Allow batterymanager and batteryproperties services to be found 2016-07-23 20:51:04 -07:00
property_contexts SELinux: Use custom ADB over network property 2015-12-16 11:01:50 -08:00
property.te sepolicy: allow userinit to set its property 2015-02-09 21:03:35 +00:00
recovery.te sepolicy: set fsck_untrusted to permissive in recovery 2017-06-16 23:32:12 +02:00
seapp_contexts sepolicy: com.cyanogenmod.updater -> org.lineageos.updater 2017-03-26 14:58:55 -06:00
sepolicy.mk Merge remote-tracking branch 'github/cm-13.0' into replicant-6.0 2015-12-17 18:24:03 +01:00
service_contexts cm: Add CMAudioService the platform 2016-04-26 16:41:19 -07:00
service.te cm: Add CMAudioService the platform 2016-04-26 16:41:19 -07:00
su.te cm: sepolicy: allow kernel to read storage 2016-02-20 14:26:41 -08:00
surfaceflinger.te sepolicy: allow bootanim and surfaceflinger execmem and access to ashmem 2016-02-16 17:32:25 +01:00
sysinit.te sepolicy: Permissions for userinit 2015-03-17 12:12:59 +00:00
system_app.te sepolicy: Allow system app to set boot anim property 2015-09-21 18:16:18 -07:00
system_server.te themes: allow system_server to relabel them dir 2016-09-20 09:18:26 -07:00
system.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
themeservice_app.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00
ueventd.te cm: sepolicy: Allow ueventd to load WiFi and audio irmware 2014-04-05 14:56:09 -07:00
uncrypt.te sepolicy: Allow uncrypt additional access 2016-05-16 13:29:06 -07:00
userinit.te sepolicy: Permissions for userinit 2015-03-17 12:12:59 +00:00
vold.te cm: sepolicy: Fix the vold blkid.tab denial from recovery 2016-08-05 00:00:03 -07:00
zygote.te sepolicy: Put theme service in its own context 2016-08-02 12:15:34 -07:00