Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add property to force restorecon to run.

Browse Source 
As an optimization, we typically only run restorecon when
seapp_contexts changes.  This CL checks a property that can be used
to always force a restorecon to help investigate boot timing.

Bug: 30213213
Change-Id: I4d65c1a4e4a0830ef4a32cd2fae1d3ab188b65cc
This commit is contained in:
Jeff Sharkey
2016-08-12 12:26:54 -06:00
committed by Jeff Sharkey
parent 41941689b7
commit 6da39a4406
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
services/core/java/com/android/server/pm/SELinuxMMAC.java
View File

@@ -19,6 +19,7 @@ package com.android.server.pm;
import android.content.pm.PackageParser; import android.content.pm.PackageParser;
import android.content.pm.Signature; import android.content.pm.Signature;
import android.os.Environment; import android.os.Environment;
import android.os.SystemProperties;
import android.system.ErrnoException; import android.system.ErrnoException;
import android.system.Os; import android.system.Os;
import android.system.OsConstants; import android.system.OsConstants;
@@ -64,6 +65,8 @@ public final class SELinuxMMAC {
// to synchronize access during policy load and access attempts. // to synchronize access during policy load and access attempts.
private static List<Policy> sPolicies = new ArrayList<>(); private static List<Policy> sPolicies = new ArrayList<>();
private static final String PROP_FORCE_RESTORECON = "sys.force_restorecon";
/** Path to version on rootfs */ /** Path to version on rootfs */
private static final File VERSION_FILE = new File("/selinux_version"); private static final File VERSION_FILE = new File("/selinux_version");
@@ -322,6 +325,11 @@ public final class SELinuxMMAC {
* @return Returns true if the restorecon should occur or false otherwise. * @return Returns true if the restorecon should occur or false otherwise.
*/ */
public static boolean isRestoreconNeeded(File file) { public static boolean isRestoreconNeeded(File file) {
// To investigate boot timing, allow a property to always force restorecon
if (SystemProperties.getBoolean(PROP_FORCE_RESTORECON, false)) {
return true;
}
try { try {
final byte[] buf = new byte[20]; final byte[] buf = new byte[20];
final int len = Os.getxattr(file.getAbsolutePath(), XATTR_SEAPP_HASH, buf); final int len = Os.getxattr(file.getAbsolutePath(), XATTR_SEAPP_HASH, buf);