Merge "Explicitly call restorecon_recursive on /metadata/apex" into rvc-dev am: 6a8602a8c9
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/core/+/11955299
Change-Id: Ibbf598ea7aac33a50fc5c7b1cab87317284e7de5
diff --git a/rootdir/init.rc b/rootdir/init.rc
index 7b57a88..e3d92b9 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -520,6 +520,12 @@
mkdir /metadata/apex 0700 root system
mkdir /metadata/apex/sessions 0700 root system
+ # On some devices we see a weird behaviour in which /metadata/apex doesn't
+ # have a correct label. To workaround this bug, explicitly call restorecon
+ # on /metadata/apex. For most of the boot sequences /metadata/apex will
+ # already have a correct selinux label, meaning that this call will be a
+ # no-op.
+ restorecon_recursive /metadata/apex
mkdir /metadata/staged-install 0770 root system
on late-fs