Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add /system_ext sepolicy support to SELinuxMMAC.java

Browse Source 
Bug: 137712473
Test: enable system_ext sepolicy, then boot crosshatch
Test: the following log entry is in `adb logcat -s SELinuxMMAC`
      SELinuxMMAC: Using policy file /system_ext/etc/selinux/system_ext_mac_permissions.xml

Change-Id: I684c920f8ecf2b5f29f2ad8901e187b7eae1bc89
This commit is contained in:
Bowgo Tsai
2019-09-11 17:06:06 +08:00
parent 6265eea819
commit 8c91b8dbac
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
services/core/java/com/android/server/pm/SELinuxMMAC.java
View File

@@ -78,6 +78,13 @@ public final class SELinuxMMAC {
sMacPermissions.add(new File(
Environment.getRootDirectory(), "/etc/selinux/plat_mac_permissions.xml"));
// SystemExt mac permissions (optional).
final File systemExtMacPermission = new File(
Environment.getSystemExtDirectory(), "/etc/selinux/system_ext_mac_permissions.xml");
if (systemExtMacPermission.exists()) {
sMacPermissions.add(systemExtMacPermission);
}
// Product mac permissions (optional).
final File productMacPermission = new File(
Environment.getProductDirectory(), "/etc/selinux/product_mac_permissions.xml");