aboutsummaryrefslogtreecommitdiffstats
path: root/rootdir
diff options
context:
space:
mode:
authorDima Zavin <dima@android.com>2012-08-01 09:52:28 -0700
committerAndroid Git Automerger <android-git-automerger@android.com>2012-08-01 09:52:28 -0700
commit35fc46d8e338181ee3caedc30f3627bad2ffe35e (patch)
tree9db28a646f9edb3116918b322906a0e689bd405c /rootdir
parent3cac204d3537c6a356c922bffb07fcb97f5bb0c7 (diff)
parent018227f5394c3126f4a858596cb85dee1893b895 (diff)
downloadsystem_core-35fc46d8e338181ee3caedc30f3627bad2ffe35e.zip
system_core-35fc46d8e338181ee3caedc30f3627bad2ffe35e.tar.gz
system_core-35fc46d8e338181ee3caedc30f3627bad2ffe35e.tar.bz2
am 018227f5: am ce76e2d0: Merge "Modify init.rc and init.goldfish.rc for SE Android."
* commit '018227f5394c3126f4a858596cb85dee1893b895': Modify init.rc and init.goldfish.rc for SE Android.
Diffstat (limited to 'rootdir')
-rw-r--r--rootdir/etc/init.goldfish.rc4
-rw-r--r--rootdir/init.rc12
2 files changed, 16 insertions, 0 deletions
diff --git a/rootdir/etc/init.goldfish.rc b/rootdir/etc/init.goldfish.rc
index 83b7f8a..cde9dee 100644
--- a/rootdir/etc/init.goldfish.rc
+++ b/rootdir/etc/init.goldfish.rc
@@ -5,6 +5,10 @@ on early-init
symlink /mnt/sdcard /sdcard
on boot
+ setsebool in_qemu=1
+ restorecon /sys/qemu_trace/process_name
+ restorecon /sys/qemu_trace/state
+ restorecon /sys/qemu_trace/symbol
setprop ARGH ARGH
setprop net.eth0.gw 10.0.2.2
setprop net.eth0.dns1 10.0.2.3
diff --git a/rootdir/init.rc b/rootdir/init.rc
index 8497591..22e5e0a 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -12,6 +12,10 @@ on early-init
# Set init and its forked children's oom_adj.
write /proc/1/oom_adj -16
+ # Set the security context for the init process.
+ # This should occur before anything else (e.g. ueventd) is started.
+ setcon u:r:init:s0
+
start ueventd
# create mountpoints
@@ -128,10 +132,14 @@ on post-fs
# We chown/chmod /cache again so because mount is run as root + defaults
chown system cache /cache
chmod 0770 /cache
+ # We restorecon /cache in case the cache partition has been reset.
+ restorecon /cache
# This may have been created by the recovery system with odd permissions
chown system cache /cache/recovery
chmod 0770 /cache/recovery
+ # This may have been created by the recovery system with the wrong context.
+ restorecon /cache/recovery
#change permissions on vmallocinfo so we can grab it from bugreports
chown root log /proc/vmallocinfo
@@ -150,6 +158,8 @@ on post-fs-data
# We chown/chmod /data again so because mount is run as root + defaults
chown system system /data
chmod 0771 /data
+ # We restorecon /data in case the userdata partition has been reset.
+ restorecon /data
# Create dump dir and collect dumps.
# Do this before we mount cache so eventually we can use cache for
@@ -345,6 +355,7 @@ on property:vold.decrypt=trigger_shutdown_framework
service ueventd /sbin/ueventd
class core
critical
+ seclabel u:r:ueventd:s0
service console /system/bin/sh
class core
@@ -361,6 +372,7 @@ service adbd /sbin/adbd
class core
socket adbd stream 660 system system
disabled
+ seclabel u:r:adbd:s0
# adbd on at boot in emulator
on property:ro.kernel.qemu=1