diff options
| author | Vishal Mahaveer <vishalm@ti.com> | 2014-07-16 09:06:59 -0500 |
|---|---|---|
| committer | Vishal Mahaveer <vishalm@ti.com> | 2014-07-21 09:33:07 -0500 |
| commit | 965845fd4b9e8866253b7e2dc86f0451beafc32b (patch) | |
| tree | c02e94178ee39e3bba1a5c392fa14cda85968e35 | |
| parent | 1c778e5ad29b386780764133acad05e5471c6eb2 (diff) | |
| download | jacinto6evm-965845fd4b9e8866253b7e2dc86f0451beafc32b.tar.gz | |
jacinto6evm: SELinux: initial policy for enabling enforcing mode
With this change we are able to boot with enforcing mode.
The rule added for healthd in this patch is taken from AOSP master.
When we switch to next Android version, this policy could be removed.
Change-Id: I8a87e1e4084c0186ae76b8b6f0cb87baf6e2ecf3
Signed-off-by: Vishal Mahaveer <vishalm@ti.com>
| -rw-r--r-- | BoardConfig.mk | 4 | ||||
| -rw-r--r-- | sepolicy/healthd.te | 1 |
2 files changed, 5 insertions, 0 deletions
diff --git a/BoardConfig.mk b/BoardConfig.mk index d80b244..34d7848 100644 --- a/BoardConfig.mk +++ b/BoardConfig.mk @@ -74,3 +74,7 @@ ifeq ($(OMAP_MULTIZONE_AUDIO),true) COMMON_GLOBAL_CFLAGS += -DOMAP_MULTIZONE_AUDIO endif +BOARD_SEPOLICY_DIRS := device/ti/jacinto6evm/sepolicy +BOARD_SEPOLICY_UNION := \ + healthd.te + diff --git a/sepolicy/healthd.te b/sepolicy/healthd.te new file mode 100644 index 0000000..89c5758 --- /dev/null +++ b/sepolicy/healthd.te @@ -0,0 +1 @@ +allow healthd rootfs:file { read entrypoint }; |