diff --git a/tools/sepolicy_cleanup_check.sh b/tools/sepolicy_cleanup_check.sh index 9def7e024..dd8c7af69 100755 --- a/tools/sepolicy_cleanup_check.sh +++ b/tools/sepolicy_cleanup_check.sh @@ -108,6 +108,10 @@ find $sedir -name "*.te" -not -path "*prebuilts*" | while read -r file; do fi done +echo +echo "Scanning for labels in file_contexts that do not escape '.' properly." +find $sedir -name file_contexts -not -path "*prebuilts*" -exec grep -H "^[^#].*[^\\]\.[^*]" '{}' \; + echo echo "Scanning for rules that use the wrong file/dir macros." grep -r ":file.*_dir_perms" --exclude=\*_macros $sedir