Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set persistent property for SELinux enforcement on update.

Browse Source 
Bug: 8702843
Change-Id: I41c0084a71160061b297d57d995261e238ea555c
This commit is contained in:
repo sync
2013-04-24 11:26:01 -07:00
parent 78cfd3cc43
commit 12566be46c
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
services/java/com/android/server/updates/SELinuxPolicyInstallReceiver.java
View File

@@ -122,9 +122,16 @@ public class SELinuxPolicyInstallReceiver extends ConfigUpdateInstallReceiver {
}
private void setEnforcingMode(Context context) {
boolean mode = Settings.Global.getInt(context.getContentResolver(),
Settings.Global.SELINUX_STATUS, 0) == 1;
SELinux.setSELinuxEnforce(mode);
String mode = Settings.Global.getString(context.getContentResolver(),
Settings.Global.SELINUX_STATUS);
if (mode.equals("1")) {
Slog.i(TAG, "Setting enforcing mode");
SystemProperties.set("persist.selinux.enforcing", mode);
} else if (mode.equals("0")) {
Slog.i(TAG, "Tried to set permissive mode, ignoring");
} else {
Slog.e(TAG, "Got invalid enforcing mode: " + mode);
}
}
@Override