commit 8c224faa24039853028c3d9c0e1eadc5ef7bd935
author Alex Hong <rurumihong@google.com> Thu Apr 22 16:35:51 2021 +0800
committer Alex Hong <rurumihong@google.com> Thu Apr 22 16:35:51 2021 +0800
tree 50461a3d34d431a7d748dd1a3c295136772d7de4
parent d684952fa7ae29feb9fde33363d20d746137dedb

Set the log callback earlier for showing system property set denials

PropertyInit loads the build.prop files and set the system properties.
Set the SELinux log callback before that to show the avc denials for debugging.

Test: $ make init_system
      Push this module and ensure system property set denials are shown during boot
Bug: 185920634
Change-Id: Ifc228985a990f6938ad2a93790eb3607b2d12b5a

init/init.cpp

diff --git a/init/init.cpp b/init/init.cpp
index a7325ca..3882513 100644
--- a/init/init.cpp
+++ b/init/init.cpp
@@ -784,6 +784,7 @@
         UmountDebugRamdisk();
     }
 
+    SelinuxSetupKernelLogging();
     PropertyInit();
 
     // Umount second stage resources after property service has read the .prop files.
@@ -798,7 +799,6 @@
     MountExtraFilesystems();
 
     // Now set up SELinux for second stage.
-    SelinuxSetupKernelLogging();
     SelabelInitialize();
     SelinuxRestoreContext();