commit ecc4868f715b74d65b75c42ff3839192f42a3a24
author Tom Cherry <tomcherry@google.com> Mon Jan 22 14:31:50 2018 -0800
committer Tom Cherry <tomcherry@google.com> Tue Jan 23 20:34:57 2018 +0000
tree 9c6b3e95eb96ac0e9ef9dd648214cece38eefcd9
parent bc24ba72839468ff76f46c47d27c2f07d98c8fd7

Label /vendor_file_contexts as file_contexts_file

vendor_init doesn't have permissions to read rootfs labeled files, but
needs to read /vendor_file_contexts to do restorecon correctly.  This
file is a file_contexts file, so labeling it as such seems appropriate.

Test: bullhead + vendor_init doesn't hit this audit
Change-Id: I1f2cf7dd7de17806ac0f1dfe2483fb6d6659939b

private/file_contexts

diff --git a/private/file_contexts b/private/file_contexts
index 9083b0c..b2a22a2 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -38,6 +38,7 @@
 /sdcard             u:object_r:rootfs:s0
 
 # SELinux policy files
+/vendor_file_contexts   u:object_r:file_contexts_file:s0
 /nonplat_file_contexts  u:object_r:file_contexts_file:s0
 /plat_file_contexts     u:object_r:file_contexts_file:s0
 /mapping_sepolicy\.cil   u:object_r:sepolicy_file:s0