From a1d97e5d1c15e0adf40b5853f2f85db7008baa77 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Tue, 8 Jul 2014 12:41:16 -0700
Subject: [PATCH] init.rc: add seclabel to flash_recovery

Make sure flash_recovery is always running in the
install_recovery SELinux domain.

Change-Id: I9495eedd03f6b5dfcf2e78c03d1102f6032b327a
---
 rootdir/init.rc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rootdir/init.rc b/rootdir/init.rc
index b3ccae1aa..153cdcf44 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -612,6 +612,7 @@ service installd /system/bin/installd
 
 service flash_recovery /system/bin/install-recovery.sh
     class main
+    seclabel u:r:install_recovery:s0
     oneshot
 
 service racoon /system/bin/racoon