commit 558710cdcc619682ef600d281f09ab4dad221692
author Nick Kralevich <nnk@google.com> Mon Jul 07 13:19:24 2014 -0700
committer Nick Kralevich <nnk@google.com> Mon Jul 07 13:23:30 2014 -0700
tree 65fa27d8826d0de08a90815734b863e00275748a
parent c0088b8064318210e775555ff4634994f7ab9e34

recovery: allow relabelto unlabeled and other unlabeled rules

The recovery script may ask to label a file with a label not
known to the currently loaded policy. Allow it.

Addresses the following denials:

  avc:  denied  { relabelto } for  pid=143 comm="update_binary" name="vdc" dev="mmcblk0p25" ino=212 scontext=u:r:recovery:s0 tcontext=u:object_r:unlabeled:s0 tclass=file
  avc:  denied  { setattr } for  pid=143 comm="update_binary" name="vdc" dev="mmcblk0p25" ino=212 scontext=u:r:recovery:s0 tcontext=u:object_r:unlabeled:s0 tclass=file

Change-Id: Iafcc7b0b3aaea5a272adb1264233978365648f94