Go to file
Jeff Vander Stoep 165b4ae091 Enforce ioctl command whitelisting on all sockets
Remove the ioctl permission for most socket types. For others, such as
tcp/udp/rawip/unix_dgram/unix_stream set a default unprivileged whitelist
that individual domains may extend (except where neverallowed like
untrusted_app). Enforce via a neverallowxperm rule.

Change-Id: I7573fdb24f9c53ad169bce2aeab1baac8b2a11ea
2017-09-20 20:56:43 +00:00
audio flo: cleanup the tree 2016-12-17 17:30:49 +11:00
bdAddrLoader flo: cleanup the tree 2016-12-17 17:30:49 +11:00
bluetooth Revert "bluetooth: Our kernel is missing CLOCK_BOOTTIME_ALARM (alarmtimer)" 2017-09-20 20:55:37 +00:00
camera flo: camera: add missing liblog dependency 2017-09-20 20:49:50 +00:00
charger_touch Break out flo and common makefiles for deb support. 2013-05-29 16:16:12 -07:00
configs flo: Build our MultiHAL sensors HAL 2017-09-20 20:56:04 +00:00
conn_init flo: conn_init: fix load macaddr 2015-10-14 09:10:23 +09:00
keylayout flo: cleanup the tree 2016-12-17 17:30:49 +11:00
overlay [REVERT ME] flo: disable some missing overlays 2017-09-20 20:50:09 +00:00
power flo: power: Use POWER_HINT_LAUNCH for launch boosts 2017-02-23 11:13:05 -06:00
rootdir flo: init: Update path owners to avoid qcom owners 2017-09-20 20:55:16 +00:00
sensors flo: sensors: Initial implementation of a wrapper for old sensors HAL 2017-09-20 20:56:00 +00:00
sepolicy Enforce ioctl command whitelisting on all sockets 2017-09-20 20:56:43 +00:00
voice_processing flo: cleanup the tree 2016-12-17 17:30:49 +11:00
wifi flo: cleanup the tree 2016-12-17 17:30:49 +11:00
Android.bp flo: Import sensors MultiHAL 2017-09-20 20:55:47 +00:00
Android.mk flo: cleanup the tree 2016-12-17 17:30:49 +11:00
BoardConfig.mk flo: cleanup the tree 2016-12-17 17:30:49 +11:00
BoardConfigCommon.mk flo: enable qcom legacy bsp flag 2017-02-13 02:17:29 +00:00
board-info.txt Fix NFC & Camera 2013-05-31 13:13:57 -07:00
device-common.mk flo: build DRM HAL 2017-09-20 20:56:30 +00:00
device.mk flo: cleanup the tree 2016-12-17 17:30:49 +11:00
extract-files.sh flo: rebrand for lineage vendor 2017-08-24 20:35:08 +03:00
kickstart_checker.sh Before this change, kickstart will possiblely be launched at two point: 2013-03-31 20:54:53 -07:00
lineage.dependencies flo: rebrand device for LineageOS 2017-01-02 21:41:12 +11:00
lineage.mk flo: rebrand for lineage vendor 2017-08-24 20:35:08 +03:00
manifest.xml flo: build NFC HIDL service 2017-09-20 20:56:24 +00:00
proprietary-blobs.txt proprietary: Add STLport library as prebuilt binary 2017-09-20 20:56:09 +00:00
releasetools.py Fix Image size for Razor and RazorG by reduce Jounal size to zero 2015-06-11 14:12:24 -07:00
setup-makefiles.sh flo: rebrand for lineage vendor 2017-08-24 20:35:08 +03:00
system.prop display: Disable EGL buffer_age extension support 2017-09-20 20:51:59 +00:00