Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add /product sepolicy support to SELinuxMMAC.java

Browse Source 
Bug: 119305624
Test: normal/recovery boot aosp_taimen
Test: this log entry is in logcat
SELinuxMMAC: Using policy file /product/etc/selinux/product_mac_permissions.xml
Test: wfcactivation app works without denials. Its mac permissions are
now in /product.
Change-Id: I977ad0d763e46dbcb5bff36fc6361b4e70098c13
This commit is contained in:
Tri Vo
2018-12-21 16:06:17 -08:00
parent abe06f9138
commit f56c5b14ce
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
services/core/java/com/android/server/pm/SELinuxMMAC.java
View File

@@ -17,8 +17,8 @@
package com.android.server.pm;
import android.content.pm.PackageParser;
import android.content.pm.Signature;
import android.content.pm.PackageParser.SigningDetails;
import android.content.pm.Signature;
import android.os.Environment;
import android.util.Slog;
import android.util.Xml;
@@ -81,6 +81,13 @@ public final class SELinuxMMAC {
sMacPermissions.add(new File(
Environment.getRootDirectory(), "/etc/selinux/plat_mac_permissions.xml"));
// Product mac permissions (optional).
final File productMacPermission = new File(
Environment.getProductDirectory(), "/etc/selinux/product_mac_permissions.xml");
if (productMacPermission.exists()) {
sMacPermissions.add(productMacPermission);
}
// Vendor mac permissions.
// The filename has been renamed from nonplat_mac_permissions to
// vendor_mac_permissions. Either of them should exist.