Merge "Enable world-readable selinuxfs policy binary."

2014-04-09 16:30:23 +00:00 · 2014-04-09 16:30:23 +00:00 · 2baf288682
parent 9101878dd0 5822a4af84
commit 2baf288682
1 changed files with 3 additions and 0 deletions
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@ -177,6 +177,9 @@ on post-fs
    chown system log /proc/last_kmsg
    chmod 0440 /proc/last_kmsg

+    # make the selinux kernel policy world-readable
+    chmod 0444 /sys/fs/selinux/policy
+
    # create the lost+found directories, so as to enforce our permissions
    mkdir /cache/lost+found 0770 root root