Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am a2e511d6: am 8b626548: Merge "Pass privapp specifier for selinux labeling"

Browse Source 
* commit 'a2e511d6ca6c3b3d465bbf2fe98f17e210c676d0':
  Pass privapp specifier for selinux labeling
This commit is contained in:
Jeffrey Vander Stoep
2015-10-14 21:44:31 +00:00
committed by Android Git Automerger
parent 6c04ad8a6a a2e511d6ca
commit 6b6d1a3076
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
services/core/java/com/android/server/pm/SELinuxMMAC.java
View File

@@ -100,6 +100,9 @@ public final class SELinuxMMAC {
private static final String SEAPP_HASH_FILE =
Environment.getDataDirectory().toString() + "/system/seapp_hash";
// Append privapp to existing seinfo label
private static final String PRIVILEGED_APP_STR = ":privapp";
/**
* Load the mac_permissions.xml file containing all seinfo assignments used to
* label apps. The loaded mac_permissions.xml file is determined by the
@@ -313,6 +316,9 @@ public final class SELinuxMMAC {
}
}
if (pkg.applicationInfo.isPrivilegedApp())
pkg.applicationInfo.seinfo += PRIVILEGED_APP_STR;
if (DEBUG_POLICY_INSTALL) {
Slog.i(TAG, "package (" + pkg.packageName + ") labeled with " +
"seinfo=" + pkg.applicationInfo.seinfo);