tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/compat
History
Alex Light a1cdf2e311 Use postinstall file_contexts 
Previously we would mount OTA images with a 'context=...' mount
option. This meant that all selinux contexts were ignored in the ota
image, limiting the usefulness of selinux in this situation. To fix
this the mount has been changed to not overwrite the declared contexts
and the policies have been updated to accurately describe the actions
being performed by an OTA.

Bug: 181182967
Test: Manual OTA of blueline
Test: lunch wembley-userdebug; m droid
Ignore-AOSP-First: Requires changes to device/mediatek/wembley-sepolicy
                   to be applied simultaneously to avoid breaking
                   builds. Once merged this will be cherry-picked back
                   to AOSP to maintain state.
Change-Id: I5eb53625202479ea7e75c27273531257d041e69d
2021-03-25 00:01:25 +00:00
..
26.0 Exempt older vendor images from recent mls changes. 2020-11-17 17:30:10 +00:00
27.0 Exempt older vendor images from recent mls changes. 2020-11-17 17:30:10 +00:00
28.0 Exempt older vendor images from recent mls changes. 2020-11-17 17:30:10 +00:00
29.0 Add vendor_public_framework_file type to SEPolicy 2021-01-26 15:59:37 +01:00
30.0 Use postinstall file_contexts 2021-03-25 00:01:25 +00:00