Merge "Coalesce shared_app, media_app, release_app into untrusted_app."
diff --git a/logd.te b/logd.te
index 782d58e..cde721a 100644
--- a/logd.te
+++ b/logd.te
@@ -8,6 +8,7 @@
allow logd self:capability2 syslog;
allow logd self:netlink_audit_socket { create_socket_perms nlmsg_write };
allow logd kernel:system syslog_read;
+allow logd kmsg_device:chr_file w_file_perms;
r_dir_file(logd, domain)
diff --git a/tools/check_seapp.c b/tools/check_seapp.c
index e5108e3..39fe77e 100644
--- a/tools/check_seapp.c
+++ b/tools/check_seapp.c
@@ -487,13 +487,13 @@
name = tmp->data;
found_name = true;
}
- if(!strcmp(tmp->name, "seinfo") && tmp->data) {
+ if(!strcmp(tmp->name, "seinfo") && tmp->data && strcmp(tmp->data, "default")) {
found_seinfo = true;
}
}
if(found_name && !found_seinfo) {
- log_error("No seinfo specified with name=\"%s\", on line: %d\n",
+ log_error("No specific seinfo value specified with name=\"%s\", on line: %d: insecure configuration!\n",
name, rm->lineno);
return false;
}