Merge "Replace SEAndroid with SELinux."
This commit is contained in:
@@ -376,7 +376,7 @@ public class Process {
|
||||
* @param gids Additional group-ids associated with the process.
|
||||
* @param debugFlags Additional flags.
|
||||
* @param targetSdkVersion The target SDK version for the app.
|
||||
* @param seInfo null-ok SE Android information for the new process.
|
||||
* @param seInfo null-ok SELinux information for the new process.
|
||||
* @param zygoteArgs Additional arguments to supply to the zygote process.
|
||||
*
|
||||
* @return An object that describes the result of the attempt to start the process.
|
||||
@@ -556,7 +556,7 @@ public class Process {
|
||||
* new process should setgroup() to.
|
||||
* @param debugFlags Additional flags.
|
||||
* @param targetSdkVersion The target SDK version for the app.
|
||||
* @param seInfo null-ok SE Android information for the new process.
|
||||
* @param seInfo null-ok SELinux information for the new process.
|
||||
* @param extraArgs Additional arguments to supply to the zygote process.
|
||||
* @return An object that describes the result of the attempt to start the process.
|
||||
* @throws ZygoteStartFailedEx if process start failed for any reason
|
||||
|
||||
@@ -803,7 +803,7 @@ class ZygoteConnection {
|
||||
}
|
||||
|
||||
/**
|
||||
* Applies zygote security policy for SEAndroid information.
|
||||
* Applies zygote security policy for SELinux information.
|
||||
*
|
||||
* @param args non-null; zygote spawner arguments
|
||||
* @param peer non-null; peer credentials
|
||||
@@ -822,7 +822,7 @@ class ZygoteConnection {
|
||||
if (!(peerUid == 0 || peerUid == Process.SYSTEM_UID)) {
|
||||
// All peers with UID other than root or SYSTEM_UID
|
||||
throw new ZygoteSecurityException(
|
||||
"This UID may not specify SEAndroid info.");
|
||||
"This UID may not specify SELinux info.");
|
||||
}
|
||||
|
||||
boolean allowed = SELinux.checkSELinuxAccess(peerSecurityContext,
|
||||
@@ -831,7 +831,7 @@ class ZygoteConnection {
|
||||
"specifyseinfo");
|
||||
if (!allowed) {
|
||||
throw new ZygoteSecurityException(
|
||||
"Peer may not specify SEAndroid info");
|
||||
"Peer may not specify SELinux info");
|
||||
}
|
||||
|
||||
return;
|
||||
|
||||
Reference in New Issue
Block a user