commit 1eee419e7a1c5789f81e1e3a19693403495e70f1
author Stephen Smalley <sds@tycho.nsa.gov> Fri Jan 13 08:54:34 2012 -0500
committer Stephen Smalley <sds@tycho.nsa.gov> Thu Jul 26 15:37:45 2012 -0400
tree 0aee47fca889f44b21251d35e7bf8c4ebe61a97c
parent ff856a2b927aaadb189181d2cd9dd08dc98456a4

Modify init.rc and init.goldfish.rc for SE Android.

Set the security context for the init process.
Restore the security contexts of /cache and /data in case they were reset.
Specify the security context for services launched from the rootfs since
we cannot label their executables.
If on the emulator, set a policy boolean and restore the context of
/sys/qemu_trace to allow accesses not normally permitted on a device.

Change-Id: I166ffc267e8e0543732e7118eb0fd4b031efac3b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

rootdir/etc/init.goldfish.rc

diff --git a/rootdir/etc/init.goldfish.rc b/rootdir/etc/init.goldfish.rc
index 83b7f8a..cde9dee 100644
--- a/rootdir/etc/init.goldfish.rc
+++ b/rootdir/etc/init.goldfish.rc
@@ -5,6 +5,10 @@
     symlink /mnt/sdcard /sdcard
 
 on boot
+    setsebool in_qemu=1
+    restorecon /sys/qemu_trace/process_name
+    restorecon /sys/qemu_trace/state
+    restorecon /sys/qemu_trace/symbol
     setprop ARGH ARGH
     setprop net.eth0.gw 10.0.2.2
     setprop net.eth0.dns1 10.0.2.3