Fix context for mapping/xx.yy.compat.cil files
The current file_contexts regular expression did not include the
.compat part of the policy.
Before:
# ls -alZ /system/etc/selinux/mapping
drwxr-xr-x 2 root root u:object_r:system_file:s0 332 2009-01-01 00:00 .
drwxr-xr-x 3 root root u:object_r:system_file:s0 376 2009-01-01 00:00 ..
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 224062 2009-01-01 00:00 10000.0.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 112668 2009-01-01 00:00 29.0.cil
-rw-r--r-- 1 root root u:object_r:system_file:s0 1003 2009-01-01 00:00 29.0.compat.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 125916 2009-01-01 00:00 30.0.cil
-rw-r--r-- 1 root root u:object_r:system_file:s0 1059 2009-01-01 00:00 30.0.compat.cil
After:
# ls -alZ /system/etc/selinux/mapping
drwxr-xr-x 2 root root u:object_r:system_file:s0 332 2023-10-06 03:40 .
drwxr-xr-x 3 root root u:object_r:system_file:s0 376 2023-10-06 03:40 ..
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 224062 2023-10-04 22:58 10000.0.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 112668 2023-10-04 22:58 29.0.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 1003 2023-09-06 01:51 29.0.compat.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 125916 2023-10-04 22:58 30.0.cil
-rw-r--r-- 1 root root u:object_r:sepolicy_file:s0 1059 2023-09-06 01:51 30.0.compat.cil
Test: boot cf & inspect new labels
Bug: 299839280
Change-Id: Ic833ccf59a6c75b0757df9de6e3fed0992839c74
diff --git a/private/file_contexts b/private/file_contexts
index 1049273..67cd476 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -343,7 +343,7 @@
/system/etc/passwd u:object_r:system_passwd_file:s0
/system/etc/seccomp_policy(/.*)? u:object_r:system_seccomp_policy_file:s0
/system/etc/security/cacerts(/.*)? u:object_r:system_security_cacerts_file:s0
-/system/etc/selinux/mapping/[0-9]+\.[0-9]+\.cil u:object_r:sepolicy_file:s0
+/system/etc/selinux/mapping/[0-9]+\.[0-9]+(\.compat)?\.cil u:object_r:sepolicy_file:s0
/system/etc/selinux/plat_mac_permissions\.xml u:object_r:mac_perms_file:s0
/system/etc/selinux/plat_property_contexts u:object_r:property_contexts_file:s0
/system/etc/selinux/plat_service_contexts u:object_r:service_contexts_file:s0