tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/tools/fc_sort
History
Jaekyun Seok e49714542e Whitelist exported platform properties 
This CL lists all the exported platform properties in
private/exported_property_contexts.

Additionally accessing core_property_type from vendor components is
restricted.
Instead public_readable_property_type is used to allow vendor components
to read exported platform properties, and accessibility from
vendor_init is also specified explicitly.

Note that whitelisting would be applied only if
PRODUCT_COMPATIBLE_PROPERTY is set on.

Bug: 38146102
Test: tested on walleye with PRODUCT_COMPATIBLE_PROPERTY=true
Change-Id: I304ba428cc4ca82668fec2ddeb17c971e7ec065e
2018-01-10 16:15:25 +00:00
..
Android.mk Use -Werror in system/sepolicy 2017-10-18 16:19:42 -07:00
fc_sort.c Whitelist exported platform properties 2018-01-10 16:15:25 +00:00
MODULE_LICENSE_GPL fc_sort: initial commit 2016-01-14 17:39:07 -08:00
NOTICE fc_sort: add NOTICE file 2016-01-14 10:45:45 -08:00
README fc_sort: initial commit 2016-01-14 17:39:07 -08:00

README 

fc_sort is a tool used for sorting the file_contexts entries based on a heuristic that is
 covered by a Fedora document. That document can be found here:
 * https://fedoraproject.org/wiki/SELinux/ManagingFileContext

The tool itself originates from:
 * https://github.com/TresysTechnology/refpolicy

It can be updated to the current tip of master branch with the below command:
$ wget https://raw.githubusercontent.com/TresysTechnology/refpolicy/master/support/fc_sort.c