sepolicy: Add domain for mkfs binaries
The init binary must transition to another domain when calling out to
executables. Create the mkfs domain for mkfs.f2fs such that init can
transition to it when formatting userdata/cache partitions if the
"formattable" flag is set.
[micky387] Change our context to this new because fsck_exec cause Selinux denial
when we try to format an Sdcard.
W binder:659_2: type=1400 audit(0.0:447): avc: denied { execute_no_trans } for path="/system/bin/mkfs.exfat" dev="dm-5" ino=445 scontext=u:r:vold:s0 tcontext=u:object_r:fsck_exec:s0 tclass=file permissive=0
https://github.com/omnirom/android_system_sepolicy/blob/android-13.0/public/vold.te#L341
Change-Id: I1046782386d171a59b1a3c5441ed265dc0824977
2 files changed