{"push_id":2600289940,"size":10,"distinct_size":10,"ref":"refs/heads/8.1","head":"1435833c729830547a6488a9dada999830abbf2d","before":"0fcb116571d8304ddfc28d60255e21b281c92a2c","commits":[{"sha":"1d1415ea021bf4b7f0c28da3c4c679bf71aa0920","author":{"name":"Andreas Gampe","email":"c21d2b0fb0f00753629cf5bfb27bd52cd3b39662@google.com"},"message":"Sepolicy: Fix perfprofd path\n\nCorresponds to commit 410cdebaf966746d6667d6d0dd4cee62262905e1 in\nsystem/extras.\n\nBug: 32286026\nTest: m\nChange-Id: I1e0934aa5bf4649d598ec460128de6f02711597f","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/1d1415ea021bf4b7f0c28da3c4c679bf71aa0920"},{"sha":"e760a5527366047be85ac1fec92f9535845908d8","author":{"name":"Jeff Vander Stoep","email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com"},"message":"system_server: allow writing to timerslack_ns\n\nThe only file in /proc/<pid>/ that is world writeable is\n/proc/<pid>/timerslack_ns so granting selinux write permission to\na process's /proc/<pid>/ file only allows writing to timerslack_ns\n(unless the process is running as system UID).\n\nAddresses denials such as:\navc: denied { write } for comm=\"Binder:1117_2\" name=\"timerslack_ns\"\ndev=\"proc\" ino=27908 scontext=u:r:system_server:s0\ntcontext=u:r:priv_app:s0 tclass=file permissive=1\n\nBug: 30675296\nTest: build\nChange-Id: I2cee8ce73a0dc05d771881c36da2fde5411859fb","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/e760a5527366047be85ac1fec92f9535845908d8"},{"sha":"8dee753f44770a8e70b33320f510753dcb87e3fb","author":{"name":"Mikhail Naganov","email":"a361489ea62b4b1f678b7012ebe7b9ee086a9d04@google.com"},"message":"Allow system_server to update timerslack_ns for hal_audio_default\n\nBased on the following audit message:\n\ntype=1400 audit(1521738979.005:385): avc: denied { write } for pid=1269\ncomm=\"Binder:1269_B\" name=\"timerslack_ns\" dev=\"proc\" ino=254190\nscontext=u:r:system_server:s0 tcontext=u:r:hal_audio_default:s0\ntclass=file permissive=1\n\nBug: 74110604\nTest: adb shell dmesg | grep hal_audio_default\nChange-Id: I4c2e787588eb9d223d5e50e1bc8f67876de97c2e","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/8dee753f44770a8e70b33320f510753dcb87e3fb"},{"sha":"7344d808f331cccdac8ca0905e746dc742d9d88f","author":{"name":"Nick Kralevich","email":"e7ef2d30577bd192d036a7f424ec6dd692d415f2@google.com"},"message":"Suppress denials from sdcardfs (b/67454004)\n\nThese denials are expected and the code has fallbacks to handle this\ncase.\n\nTest: policy compiles.\nBug: 67454004\nChange-Id: I787625494d0a7c9945318428b6fd3f668a8a2564","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/7344d808f331cccdac8ca0905e746dc742d9d88f"},{"sha":"a0fdfba591bac0b075b135e13cec2e559fdca133","author":{"name":"Jeff Vander Stoep","email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com"},"message":"priv_app: move logspam suppression to core policy\n\nNo sign of these denials getting cleaned up, so supress them in core\npolicy.\n\nTest: build\nChange-Id: I0320425cb72cbd15cef0762090899491338d4f7c","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/a0fdfba591bac0b075b135e13cec2e559fdca133"},{"sha":"7f0322c01754d166f2ce3c6ae9df0409489fc4ab","author":{"name":"Jeff Vander Stoep","email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com"},"message":"Suppress denials for non-API access\n\navc: denied { read } scontext=u:r:priv_app:s0:c512,c768\ntcontext=u:object_r:wifi_prop:s0 tclass=file\navc: denied { read } scontext=u:r:priv_app:s0:c512,c768\ntcontext=u:object_r:net_dns_prop:s0 tclass=file\n\nBug: 72151306\nTest: build\nChange-Id: I4b658ccd128746356f635ca7955385a89609eea1","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/7f0322c01754d166f2ce3c6ae9df0409489fc4ab"},{"sha":"6bfe34dfd911601d361eefa4d1729c95ecf311a5","author":{"name":"Jeff Vander Stoep","email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com"},"message":"priv_app: suppress denials for /proc/stat\n\nBug: 72668919\nTest: build\nChange-Id: Id156b40a572dc0dbfae4500865400939985949d9","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/6bfe34dfd911601d361eefa4d1729c95ecf311a5"},{"sha":"eb7aee69b3dcb5608b4e89c1789cee667bd198d5","author":{"name":"Joel Galenson","email":"dfc7dd7cbd747802053983340e864431e3f54b53@google.com"},"message":"Hide some denials.\n\nThese denials occur fairly often, causing some logspam.\n\nBug: 77225170\nTest: Boot device.\nMerged-In: Icd73a992aee44007d0873743f706758f9a19a112\nChange-Id: Icd73a992aee44007d0873743f706758f9a19a112\n(cherry picked from commit a66d1a4543fc6d43fe2e798bb81347d1097227cf)","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/eb7aee69b3dcb5608b4e89c1789cee667bd198d5"},{"sha":"2b38691290aa3378ff7e2995ab78a5e26d6b40e3","author":{"name":"gimme","email":"6726eba3e164feecd270ffe470de7ed3ed8e34c6@gmail.com"},"message":"Sepolicy: Clean up white space\n\nChange-Id: I6fc7f6d5251e5996bff08e8a5e29340ca394dd5b","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/2b38691290aa3378ff7e2995ab78a5e26d6b40e3"},{"sha":"1435833c729830547a6488a9dada999830abbf2d","author":{"name":"Luca Stefani","email":"0d6f70af3e794677c14e1cb2f27fcc973b2c55f0@gmail.com"},"message":"Revert \"sepolicy: Conditionally restore support for legacy f_adb interface\"\n\nThis reverts commit 32f56ee0e05d0ff727e5589f955ef4743802f892.\n\nChange-Id: I07377c1dff1226b656f5b9b47f2510124f917fcc","distinct":true,"url":"https://api.github.com/repos/LLuviaOS/android_system_sepolicy/commits/1435833c729830547a6488a9dada999830abbf2d"}]}
{"actor":{"display_login":"leodiram"}}