summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVishal Mahaveer2014-07-16 09:06:59 -0500
committerVishal Mahaveer2014-07-21 09:33:07 -0500
commit965845fd4b9e8866253b7e2dc86f0451beafc32b (patch)
treec02e94178ee39e3bba1a5c392fa14cda85968e35
parent1c778e5ad29b386780764133acad05e5471c6eb2 (diff)
downloaddevice-ti-jacinto6evm-965845fd4b9e8866253b7e2dc86f0451beafc32b.tar.gz
device-ti-jacinto6evm-965845fd4b9e8866253b7e2dc86f0451beafc32b.tar.xz
device-ti-jacinto6evm-965845fd4b9e8866253b7e2dc86f0451beafc32b.zip
jacinto6evm: SELinux: initial policy for enabling enforcing mode
With this change we are able to boot with enforcing mode. The rule added for healthd in this patch is taken from AOSP master. When we switch to next Android version, this policy could be removed. Change-Id: I8a87e1e4084c0186ae76b8b6f0cb87baf6e2ecf3 Signed-off-by: Vishal Mahaveer <vishalm@ti.com>
-rw-r--r--BoardConfig.mk4
-rw-r--r--sepolicy/healthd.te1
2 files changed, 5 insertions, 0 deletions
diff --git a/BoardConfig.mk b/BoardConfig.mk
index d80b244..34d7848 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -74,3 +74,7 @@ ifeq ($(OMAP_MULTIZONE_AUDIO),true)
74COMMON_GLOBAL_CFLAGS += -DOMAP_MULTIZONE_AUDIO 74COMMON_GLOBAL_CFLAGS += -DOMAP_MULTIZONE_AUDIO
75endif 75endif
76 76
77BOARD_SEPOLICY_DIRS := device/ti/jacinto6evm/sepolicy
78BOARD_SEPOLICY_UNION := \
79 healthd.te
80
diff --git a/sepolicy/healthd.te b/sepolicy/healthd.te
new file mode 100644
index 0000000..89c5758
--- /dev/null
+++ b/sepolicy/healthd.te
@@ -0,0 +1 @@
allow healthd rootfs:file { read entrypoint };