Commits
Ji Luo committed bea523964e0
MA-14588 Update selinux for legacy(i.mx6/7) platforms
Update the selinux rules for some legacy platforms.
After treble is enabled, some vendor services can't get
access to system properties or resources, so remove the
"restorecon /cache/recovery" which will bring selinux errors.
Known issues:
1. selinux denied for "dac_read_search":
avc: denied { dac_read_search } for pid=1235 comm="main"
capability=2 scontext=u:r:zygote:s0 tcontext=u:r:zygote:s0
tclass=capability permissive=0
2. selinux denied when write '/proc/cpu/alignment' in init.rc
on legacy platforms:
avc: denied { write } for pid=1 comm="init" name="alignment"
dev="proc" ino=4026532086 scontext=u:r:init:s0
tcontext=u:object_r:proc:s0 tclass=file permissive=0
Test: dmesg | grep denied
Change-Id: I52c757f88ace1225c2ac24e0f79d6ba752f29522
Signed-off-by: Ji Luo <ji.luo@nxp.com>
Reviewed-on: http://androidsource.ap.freescale.net/project/8129
Reviewed-by: zhang sanshan <sanshan.zhang@nxp.com>
Reviewed-by: guoyin.chen <guoyin.chen@nxp.com>