tequilaOS/platform_system_core
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

run-as: add ":fromRunAs" selector in seinfo.

Browse source 
It notifies libselinux that the setcontext request is from run-as.
And libselinux will set current process to runas_app domain, which
can execute app data files.

Bug: 118737210
Test: run CtsSimpleperfTestCases.
Change-Id: Ib94087f910786dd5d2a2b2e3b1bf76dfa7131ced
This commit is contained in:
Yabin Cui 2018-11-02 15:22:13 -07:00
parent a97d6e36d5
commit 97e3bb3a94
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
run-as/run-as.cpp
View file

@ -25,6 +25,8 @@
#include <sys/types.h>
#include <unistd.h>
#include <string>
#include <libminijail.h>
#include <scoped_minijail.h>
@ -214,7 +216,8 @@ int main(int argc, char* argv[]) {
minijail_keep_supplementary_gids(j.get());
minijail_enter(j.get());
if (selinux_android_setcontext(uid, 0, info.seinfo, pkgname) < 0) {
std::string seinfo = std::string(info.seinfo) + ":fromRunAs";
if (selinux_android_setcontext(uid, 0, seinfo.c_str(), pkgname) < 0) {
error(1, errno, "couldn't set SELinux security context");
}