{"push_id":1897345267,"size":13,"distinct_size":13,"ref":"refs/heads/system_sepolicy","head":"3441673a4c97f0f4f022960200fbcf2e7d1ab38f","before":"d649f91a37962f08bbd6ff6c4943ba1e2116e932","commits":[{"sha":"a5bb25939a8bb49fa5ae509e383a59531bccf4d6","author":{"name":"Nick Kralevich","email":"9fb1f2f123bed3d2f2ecce5f8d59b4a06d49fd24@google.com"},"message":"system_server: replace sys_resource with sys_ptrace\n\nCommit https://android.googlesource.com/kernel/common/+/f0ce0eee added\nCAP_SYS_RESOURCE as a capability check which would allow access to\nsensitive /proc/PID files. However, in an SELinux based world, allowing\nthis access causes CAP_SYS_RESOURCE to duplicate what CAP_SYS_PTRACE\n(without :process ptrace) already provides.\n\nUse CAP_SYS_PTRACE instead of CAP_SYS_RESOURCE.\n\nTest: Device boots, functionality remains identical, no sys_resource\ndenials from system_server.\nBug: 34951864\nBug: 38496951\nChange-Id: I04d745b436ad75ee1ebecf0a61c6891858022e34\n(cherry picked from commit 448669540c0b7c22ee8b8293217818f8f92238b6)\n(cherry picked from commit 3d8dde0e2e7ae6d6901ec3a708c8b891eacf1631)","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/a5bb25939a8bb49fa5ae509e383a59531bccf4d6"},{"sha":"b7fe2d04d44e125304c16f96f743f3846ee78f06","author":{"name":"android-build-team Robot","email":"d1db67c3e1c8f966ac34a6e8d33c6af834112137@google.com"},"message":"Merge cherrypicks of [2310999, 2310925, 2310891, 2311000, 2310892, 2310858, 2310986, 2310963, 2311043, 2310928, 2311044, 2310990, 2311022, 2311023, 2310917, 2310994, 2311024, 2311045, 2310967, 2310995, 2311003, 2311059, 2311025, 2311060, 2310953, 2311061, 2311004, 2311046, 2311005, 2311047, 2311006, 2311079, 2310954, 2311026, 2310896, 2310898, 2310997, 2311062, 2310955, 2311029, 2310998, 2311080, 2311119, 2311030, 2310933, 2311140, 2311063, 2310934, 2311049, 2311050, 2311084, 2311031, 2311145, 2311164] into nyc-mr2-security-c-release\n\nChange-Id: I8c12700188296c623b846a244a3f67b1bdbe46e7","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/b7fe2d04d44e125304c16f96f743f3846ee78f06"},{"sha":"59da8198d8b64d5df7e065878a1776a23c68538f","author":{"name":"LuK1337","email":"e5dd82ba551cd5824ff25209b043164644f98a02@gmail.com"},"message":"sepolicy: Allow optional platform text relocations\n\nChange-Id: Ibcf8a1014c8fcfdc33ea26e1e852bc5f58d20af6","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/59da8198d8b64d5df7e065878a1776a23c68538f"},{"sha":"757496e280ddd3df5adb677bb618169efdefe532","author":{"name":"Steve Kondik","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@cyngn.com"},"message":"sepolicy: Declare QTI attribute\n\n * Needed for neverallow issues\n\nChange-Id: I34248d31449381a1ff1c2ea2c12508e4dfc5918c","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/757496e280ddd3df5adb677bb618169efdefe532"},{"sha":"d77fb67fed15090c52e552783f6f07a0737b121d","author":{"name":"Biswajit Paul","email":"7ee5649c8de55a61a3bbcbc7dcde16c04b2f65da@codeaurora.org"},"message":"sepolicy : Allow qti_debugfs_domain permission to access debugfs\n\nWhiltelist qti_debugfs_domain to access debugfs\n\nCRs-Fixed: 1025226\nChange-Id: I1f9deb0df3759ecbe2ffd99330ff8a3662648765","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/d77fb67fed15090c52e552783f6f07a0737b121d"},{"sha":"2edd6b5a8230319bf8c191934e2f02a9054ee9b8","author":{"name":"Adrian DC","email":"12dd3edf19778ce3ff671afff1f3c7743019c997@gmail.com"},"message":"sepolicy: domain: Allow adbd and init for transitions\n\n * Fix allow adbd qti-testscripts:process { dyntransition }\n    abd allow init qti-testscripts:process { transition }\n\nChange-Id: I461f72f2b5f4995491e3025c4851fadbbcffa451\nSigned-off-by: Adrian DC <radian.dc@gmail.com>","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/2edd6b5a8230319bf8c191934e2f02a9054ee9b8"},{"sha":"747a05b3132df1468889e9b3ba30ec15ac55a7f4","author":{"name":"Steve Kondik","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@cyngn.com"},"message":"sepolicy: Forward declaration of qti-testscripts domain\n\n * This is used by the QCOM-specific policy and needs to dodge\n   a neverallow rule on debug builds for test purposes.\n * For non-QCOM devices which don't include device/qcom/sepolicy,\n   we need to forward-declare the domain so the build completes.\n\nChange-Id: Ie22e4c550d24ffb8bf7f9320751d41603eff93f5","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/747a05b3132df1468889e9b3ba30ec15ac55a7f4"},{"sha":"1de6b435ebad4eb8cce521c5544385bce2589547","author":{"name":"LuK1337","email":"e5dd82ba551cd5824ff25209b043164644f98a02@gmail.com"},"message":"Add rules required for TARGET_HAS_LEGACY_CAMERA_HAL1\n\nChange-Id: Ica4926fa3acf88b95c687f25eec4dbc68ea41fbb","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/1de6b435ebad4eb8cce521c5544385bce2589547"},{"sha":"4a8f8ffbafbf62869209746d6850f5016c6ec305","author":{"name":"Swetha Vucha","email":"34aac2d92d82630cebb1186369ce3cb4afba2c4a@codeaurora.org"},"message":"sepolicy: sepolicy update for qti-test\n\nChange-Id: I0f9132a35d853dda2832fb4e7d0ca20079f19a2f","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/4a8f8ffbafbf62869209746d6850f5016c6ec305"},{"sha":"9bb2ddb66141401008a6dc341f32e3efe9ff746d","author":{"name":"Lalit Kansara","email":"c66fd7eefc1540aa463f6c098cc44ad6854ba706@codeaurora.org"},"message":"Compilation fix: N-MR1 merge.\n\nChange-Id: If96e9aee38095550bd838842f66380956ebd7dd6","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/9bb2ddb66141401008a6dc341f32e3efe9ff746d"},{"sha":"3b52a80af49d5b306221a915fb714b3a277ae047","author":{"name":"Tom Marshall","email":"1262307cc1bdcf44594471c15dbc89db1915b3dd@cyngn.com"},"message":"sepolicy: New type sdcard_posix for labeled filesystems\n\n * Need this because sdcard_external is an alias for vfat\n\nChange-Id: I804ebb0fcf643d603b1a02ee7a54e6d5b6b46294","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/3b52a80af49d5b306221a915fb714b3a277ae047"},{"sha":"04cca756c58d1ddf07f0824c528f4caabc0bd6ea","author":{"name":"Michael Bestas","email":"a32d6732e1ff290ee23b7d26251988526f4975e9@gmail.com"},"message":"sepolicy: allow vold to mount ext4 sdcard\n\n* Originally in 9a19f575a4c991bf2d7bc2f8f980909910ee4cce vendor/cm\n\nChange-Id: Id95e48d2380aa7a6727be765e3a52ee49d814bcb","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/04cca756c58d1ddf07f0824c528f4caabc0bd6ea"},{"sha":"3441673a4c97f0f4f022960200fbcf2e7d1ab38f","author":{"name":"LuK1337","email":"e5dd82ba551cd5824ff25209b043164644f98a02@gmail.com"},"message":"Allow appdomain to read/write files in sdcard_posix\n\nChange-Id: I5995c4af896016162d7ee1d46e61a61249df91a6","distinct":true,"url":"https://api.github.com/repos/AdrianDC/aosp_development_sony8960_n/commits/3441673a4c97f0f4f022960200fbcf2e7d1ab38f"}]}
{"actor":{"display_login":"AdrianDC"}}