am 88d040a3: am 3df76c0c: am 6bec36ec: am 5b8abdf6: Merge "Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls."

* commit '88d040a32feac727a7e11658198c32d9cc563d8e': Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
2014-01-02 21:08:36 +00:00 · 2014-01-02 21:08:36 +00:00 · cb1f0147d7
parent dab375bcba 88d040a32f
commit cb1f0147d7
1 changed files with 3 additions and 0 deletions
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@ -13,6 +13,9 @@ on early-init
    # Set init and its forked children's oom_adj.
    write /proc/1/oom_score_adj -1000

+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
    # Set the security context for the init process.
    # This should occur before anything else (e.g. ueventd) is started.
    setcon u:r:init:s0