Run the console service shell in the shell domain.

This allows it to be permissive in userdebug/eng builds but confined/enforcing in user builds. Change-Id: Ie322eaa0acdbefea2de4e71ae386778c929d042b Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2013-12-23 14:11:02 -05:00 · 2013-12-23 14:11:02 -05:00 · 610653fe93
parent cd8b953ede
commit 610653fe93
1 changed files with 1 additions and 0 deletions
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@ -431,6 +431,7 @@ service console /system/bin/sh
    disabled
    user shell
    group log
+    seclabel u:r:shell:s0

 on property:ro.debuggable=1
    start console