| /docs/source.android.com/src/security/selinux/ |
| concepts.jd | 1 page.title=SELinux concepts
27 <p>Review this page to become familar with the concepts at play within SELinux.</p>
31 <p>Security Enhanced Linux (SELinux), is a mandatory access control (MAC) system
39 <p>SELinux has been implemented as part of the Linux Security Module (LSM)
44 security object. SELinux provides an implementation for these hooks and
55 <p>Starting in Android 4.3, SELinux provides a mandatory access control (MAC)
60 SELinux can be used to label these devices so the process assigned the root
65 <p>See <a href="implement.html#use_cases">Use Cases</a> for more examples of threats and ways to address them with SELinux.</p>
69 <p>Become familiar with the following terms to understand how SELinux can be
73 <li><em>Permissive</em> - SELinux security policy is not enforced, only logged
[all...] |
| customize.jd | 1 page.title=Customizing SELinux
29 to the Android operating system. Of course, these policies must still meet the <a href="{@docRoot}compatibility/index.html">Android Compatibility program</a> requirements and not remove the default SELinux settings.</p>
32 risk breaking the Android SELinux implementation and the applications it
35 modification to continue functioning on SELinux-enabled devices.</p>
37 <p>When embarking upon customizing SELinux, manufacturers should remember to:</p>
40 <li>Write SELinux policy for all new daemons
59 <p>SELinux uses a whitelist approach, meaning all access must be explicitly
60 allowed in policy in order to be granted. Since Android's default SELinux
62 to modify SELinux settings in any way. If they do customize SELinux settings
[all...] |
| /external/selinux/libselinux/man/man3/ |
| getexeccon.3 | 1 .TH "getexeccon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation"
3 getexeccon, setexeccon \- get or set the SELinux security context used for executing a new process
8 .B #include <selinux/selinux.h>
105 .BR selinux "(8), " freecon "(3), " getcon "(3)"
|
| matchpathcon.3 | 1 .TH "matchpathcon" "3" "21 November 2009" "sds@tycho.nsa.gov" "SELinux API documentation"
3 matchpathcon, matchpathcon_index \- get the default SELinux security context for the specified path from the file contexts configuration
6 .B #include <selinux/selinux.h>
127 .BR selinux "(8), " set_matchpathcon_flags "(3), " set_matchpathcon_invalidcon "(3), " set_matchpathcon_printf "(3), " matchpathcon_filespec_add "(3), " matchpathcon_checkmatches "(3), " freecon "(3), " setfilecon "(3), " setfscreatecon "(3)"
|
| security_class_to_string.3 | 4 .TH "security_class_to_string" "3" "30 Mar 2007" "" "SELinux API documentation"
7 between SELinux class and permission values and string names.
12 .B #include <selinux/selinux.h>
93 .BR selinux (8),
|
| selinux_file_context_verify.3 | 1 .TH "selinux_file_context_verify" "3" "08 March 2011" "SELinux API documentation"
3 selinux_file_context_verify \- Compare the SELinux security context on disk to the default security context required by the policy file contexts file
6 .B #include <selinux/selinux.h>
101 .BR selinux "(8)"
|
| selinux_raw_context_to_color.3 | 1 .TH "selinux_raw_context_to_color" "3" "08 April 2011" "SELinux API documentation"
3 selinux_raw_context_to_color \- Return RGB color string for an SELinux security context
6 .B #include <selinux/selinux.h>
123 .BR selinux "(8), " selinux_colors_path "(3), " mcstransd "(8), " secolor.conf "(5), " selinux_raw_to_trans_context "(3), " selinux_trans_to_raw_context "(3), " free "(3)"
|
| selinux_set_callback.3 | 4 .TH "selinux_set_callback" "3" "20 Jun 2007" "" "SELinux API documentation"
6 selinux_set_callback \- userspace SELinux callback facilities
9 .B #include <selinux/selinux.h>
118 .BR selinux (8)
|
| /external/selinux/libselinux/utils/ |
| getsebool.c | 7 #include <selinux/selinux.h>
26 fprintf(stderr, "%s: SELinux is disabled\n",
50 fprintf(stderr, "%s: SELinux is disabled\n", argv[0]);
|
| /external/selinux/policycoreutils/load_policy/ |
| load_policy.c | 7 #include <selinux/selinux.h>
69 /* SELinux is already enabled, we should not do an initial load again */
78 /* SELinux in enforcing mode but load_policy failed */
|
| /external/selinux/policycoreutils/mcstrans/share/examples/pipes/ |
| setrans.conf | 20 Include=/etc/selinux/mls/setrans.d/pipes.conf
|
| /external/selinux/policycoreutils/sepolicy/ |
| policy.c | 3 * Python bindings to search SELinux Policy rules.
81 "Initialize SELinux policy for use with search and info"},
83 "Return SELinux policy info about types, attributes, roles, users"},
85 "Search SELinux Policy for allow, neverallow, auditallow, dontaudit and transition records"},
|
| setup.py | 12 setup(name="sepolicy", version="1.1", description="Python SELinux Policy Analyses bindings", author="Daniel Walsh", author_email="dwalsh@redhat.com", ext_modules=[policy], packages=["sepolicy", "sepolicy.templates", "sepolicy.help"], package_data={'sepolicy': ['*.glade'], 'sepolicy.help': ['*.txt', '*.png']})
|
| /system/core/logd/ |
| README.auditd | 13 example below is for SELinux:
|
| /system/sepolicy/ |
| servicemanager.te | 16 # Check SELinux permissions.
|
| /system/vold/ |
| sehandle.h | 20 #include <selinux/android.h>
|
| /external/selinux/policycoreutils/po/ |
| pt.po | 73 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
75 "Desculpe, o 'run_init' só poderá ser utilizado num kernel com SELinux.\n"
97 msgstr "Não foi possível iniciar o descritor do SELinux (\"semanage\")"
100 msgid "SELinux policy is not managed or store cannot be accessed."
101 msgstr "A política do SELinux não é gerida ou não é possível aceder aos dados."
110 "Não é possível estabelecer uma ligação ao gestor do SELinux (\"semanage\")"
127 "Não foi possível iniciar uma transacção do gestor do SELinux (\"semanage\")"
138 msgid "Could not list SELinux modules"
139 msgstr "Não foi possível listar os módulos SELinux"
252 msgid "Could not set SELinux user for %s
[all...] |
| fi.po | 74 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
75 msgstr "run_initiä voi käyttää vain SELinux-kernelillä.\n"
100 msgid "SELinux policy is not managed or store cannot be accessed."
101 msgstr "SELinux-käytäntöä ei hallita tai säilöä ei voida käyttää."
136 msgid "Could not list SELinux modules"
137 msgstr "SELinux-moduuleita ei voitu luetteloida"
248 msgid "Could not set SELinux user for %s"
249 msgstr "Käyttäjän %s SELinux-käyttäjää ei voitu asettaa"
279 "Käyttäjän %s kirjautumisassosiaatio on määritelty SELinux-käytännössä, sitä "
293 #: ../gui/system-config-selinux.glade:10
[all...] |
| ar.po | 77 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
78 msgstr "????? ?? ???? ??????? run_init ??? ??? ???? SELinux.\n"
103 msgid "SELinux policy is not managed or store cannot be accessed."
104 msgstr "????? SELinux ??? ?????? ?? ?? ???? ?????? ??? ??????."
139 msgid "Could not list SELinux modules"
140 msgstr "?? ???? ??? ????? ????? SELinux"
249 msgid "Could not set SELinux user for %s"
250 msgstr "?? ???? ??? ?????? SELinux ?? %s"
292 #: ../gui/system-config-selinux.glade:100
300 #: ../gui/system-config-selinux.glade:12
[all...] |
| ca.po | 76 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
77 msgstr "El run_init només es pot fer servir amb un nucli SELinux.\n"
102 msgid "SELinux policy is not managed or store cannot be accessed."
104 "No s'està gestionant les polítiques del SELinux o no es pot accedir al "
140 msgid "Could not list SELinux modules"
141 msgstr "No s'han pogut llistar els mòduls SELinux"
252 msgid "Could not set SELinux user for %s"
253 msgstr "No s'ha pogut establir l'usuari SELinux per a %s"
295 #: ../gui/system-config-selinux.glade:100
303 #: ../gui/system-config-selinux.glade:12
[all...] |
| da.po | 75 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
76 msgstr "Beklager, run_init kan kun bruges på en SELinux-kerne.\n"
101 msgid "SELinux policy is not managed or store cannot be accessed."
102 msgstr "SELinux regelsæt er ikke håndteret, eller lager kan ikke tilgåes."
137 msgid "Could not list SELinux modules"
138 msgstr "Kunne ikke liste SELinux-moduler"
248 msgid "Could not set SELinux user for %s"
249 msgstr "Kunne ikke indstille SELinux-bruger for %s"
292 #: ../gui/system-config-selinux.glade:100
300 #: ../gui/system-config-selinux.glade:12
[all...] |
| en_GB.po | 75 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
76 msgstr "Sorry, run_init may be used only on a SELinux kernel.\n"
101 msgid "SELinux policy is not managed or store cannot be accessed."
102 msgstr "SELinux policy is not managed or store cannot be accessed."
137 msgid "Could not list SELinux modules"
138 msgstr "Could not list SELinux modules"
247 msgid "Could not set SELinux user for %s"
248 msgstr "Could not set SELinux user for %s"
290 #: ../gui/system-config-selinux.glade:100
298 #: ../gui/system-config-selinux.glade:12
[all...] |
| nl.po | 76 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
77 msgstr "Sorry, run_init mag alleen worden gebruikt met een SELinux kernel.\n"
102 msgid "SELinux policy is not managed or store cannot be accessed."
103 msgstr "SELinux tactiek is niet beheerd of krijg geen toegang tot opslag."
138 msgid "Could not list SELinux modules"
139 msgstr "Kan SELinux modules niet tonen"
248 msgid "Could not set SELinux user for %s"
249 msgstr "Kan SELinux gebruiker niet instellen voor %s"
293 #: ../gui/system-config-selinux.glade:100
301 #: ../gui/system-config-selinux.glade:12
[all...] |
| sr.po | 76 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
77 msgstr "?????, run_init ?? ???? ????????? ???? ?? SELinux ??????.\n"
102 msgid "SELinux policy is not managed or store cannot be accessed."
103 msgstr "SELinux ??????? ?? ?? ??????? ??? ?? ?? ???? ?????????? ?????????."
138 msgid "Could not list SELinux modules"
139 msgstr "?? ???? ?? ??????? SELinux ??????"
249 msgid "Could not set SELinux user for %s"
250 msgstr "?? ???? ?? ???????? SELinux ????????? ?? %s"
292 #: ../gui/system-config-selinux.glade:100
300 #: ../gui/system-config-selinux.glade:12
[all...] |
| sr@latin.po | 77 msgid "Sorry, run_init may be used only on a SELinux kernel.\n"
78 msgstr "?alim, run_init se mo?e koristiti samo na SELinux jezgru.\n"
103 msgid "SELinux policy is not managed or store cannot be accessed."
104 msgstr "SELinux polisom se ne upravlja ili se ne mo?e pristupiti skladi?tu."
139 msgid "Could not list SELinux modules"
140 msgstr "Ne mogu da popi?em SELinux module"
250 msgid "Could not set SELinux user for %s"
251 msgstr "Ne mogu da postavim SELinux korisnika za %s"
293 #: ../gui/system-config-selinux.glade:100
301 #: ../gui/system-config-selinux.glade:12
[all...] |
