Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 8b626548: Merge "Pass privapp specifier for selinux labeling"

Browse Source 
* commit '8b62654855b105e5ff7628107691309a63effe0c':
  Pass privapp specifier for selinux labeling
This commit is contained in:
Jeffrey Vander Stoep
2015-10-14 21:38:41 +00:00
committed by Android Git Automerger
parent 651cb804b1 8b62654855
commit a2e511d6ca
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
services/core/java/com/android/server/pm/SELinuxMMAC.java
View File

@@ -100,6 +100,9 @@ public final class SELinuxMMAC {
private static final String SEAPP_HASH_FILE = private static final String SEAPP_HASH_FILE =
Environment.getDataDirectory().toString() + "/system/seapp_hash"; Environment.getDataDirectory().toString() + "/system/seapp_hash";
// Append privapp to existing seinfo label
private static final String PRIVILEGED_APP_STR = ":privapp";
/** /**
* Load the mac_permissions.xml file containing all seinfo assignments used to * Load the mac_permissions.xml file containing all seinfo assignments used to
* label apps. The loaded mac_permissions.xml file is determined by the * label apps. The loaded mac_permissions.xml file is determined by the
@@ -313,6 +316,9 @@ public final class SELinuxMMAC {
} }
} }
if (pkg.applicationInfo.isPrivilegedApp())
pkg.applicationInfo.seinfo += PRIVILEGED_APP_STR;
if (DEBUG_POLICY_INSTALL) { if (DEBUG_POLICY_INSTALL) {
Slog.i(TAG, "package (" + pkg.packageName + ") labeled with " + Slog.i(TAG, "package (" + pkg.packageName + ") labeled with " +
"seinfo=" + pkg.applicationInfo.seinfo); "seinfo=" + pkg.applicationInfo.seinfo);