Merge "Pass targetSdkVersion specifier for SELinux labeling"

am: 4516240b47

Change-Id: Ic61c4dc30f075d01a85d8b60cfe4ae1de773aa09
This commit is contained in:
Michael Peck
2017-02-14 23:50:17 +00:00
committed by android-build-merger

View File

@@ -69,6 +69,9 @@ public final class SELinuxMMAC {
// Append autoplay to existing seinfo label // Append autoplay to existing seinfo label
private static final String AUTOPLAY_APP_STR = ":autoplayapp"; private static final String AUTOPLAY_APP_STR = ":autoplayapp";
// Append targetSdkVersion=n to existing seinfo label where n is the app's targetSdkVersion
private static final String TARGETSDKVERSION_STR = ":targetSdkVersion=";
/** /**
* Load the mac_permissions.xml file containing all seinfo assignments used to * Load the mac_permissions.xml file containing all seinfo assignments used to
* label apps. The loaded mac_permissions.xml file is determined by the * label apps. The loaded mac_permissions.xml file is determined by the
@@ -290,6 +293,8 @@ public final class SELinuxMMAC {
if (pkg.applicationInfo.isPrivilegedApp()) if (pkg.applicationInfo.isPrivilegedApp())
pkg.applicationInfo.seinfo += PRIVILEGED_APP_STR; pkg.applicationInfo.seinfo += PRIVILEGED_APP_STR;
pkg.applicationInfo.seinfo += TARGETSDKVERSION_STR + pkg.applicationInfo.targetSdkVersion;
if (DEBUG_POLICY_INSTALL) { if (DEBUG_POLICY_INSTALL) {
Slog.i(TAG, "package (" + pkg.packageName + ") labeled with " + Slog.i(TAG, "package (" + pkg.packageName + ") labeled with " +
"seinfo=" + pkg.applicationInfo.seinfo); "seinfo=" + pkg.applicationInfo.seinfo);