init: manually restorecon mke2fs tools on ramdisk
Files in the ramdisk by default have the rootfs label and must be manually restoreconed. Bug: 35219933 Change-Id: I2a749f128dc3a609907101ce703747f8990b4386
This commit is contained in:
parent
5ad06cbb1c
commit
2d019f859b
|
@ -863,9 +863,9 @@ static void selinux_initialize(bool in_kernel_domain) {
|
|||
}
|
||||
}
|
||||
|
||||
// The files and directories that were created before initial sepolicy load
|
||||
// need to have their security context restored to the proper value.
|
||||
// This must happen before /dev is populated by ueventd.
|
||||
// The files and directories that were created before initial sepolicy load or
|
||||
// files on ramdisk need to have their security context restored to the proper
|
||||
// value. This must happen before /dev is populated by ueventd.
|
||||
static void selinux_restore_context() {
|
||||
LOG(INFO) << "Running restorecon...";
|
||||
restorecon("/dev");
|
||||
|
@ -882,6 +882,9 @@ static void selinux_restore_context() {
|
|||
restorecon("/sys", SELINUX_ANDROID_RESTORECON_RECURSE);
|
||||
restorecon("/dev/block", SELINUX_ANDROID_RESTORECON_RECURSE);
|
||||
restorecon("/dev/device-mapper");
|
||||
|
||||
restorecon("/sbin/mke2fs");
|
||||
restorecon("/sbin/e2fsdroid");
|
||||
}
|
||||
|
||||
// Set the UDC controller for the ConfigFS USB Gadgets.
|
||||
|
|
Loading…
Reference in New Issue