tree a76ddaeda7a22c82bff17d19f529bde52766139d
parent 9ead146ea033f7c1bab2bbded1f2b0e48d8c98f6
author Keith Mok <kmok@cyngn.com> 1450214674 -0800
committer micky387 <mickaelsaibi@free.fr> 1695382289 +0200

sepolicy: Add domain for mkfs binaries

The init binary must transition to another domain when calling out to
executables. Create the mkfs domain for mkfs.f2fs such that init can
transition to it when formatting userdata/cache partitions if the
"formattable" flag is set.

[micky387] Change our context to this new because fsck_exec cause Selinux denial
when we try to format an Sdcard.

W binder:659_2: type=1400 audit(0.0:447): avc: denied { execute_no_trans } for path="/system/bin/mkfs.exfat" dev="dm-5" ino=445 scontext=u:r:vold:s0 tcontext=u:object_r:fsck_exec:s0 tclass=file permissive=0

https://github.com/omnirom/android_system_sepolicy/blob/android-13.0/public/vold.te#L341

Change-Id: I1046782386d171a59b1a3c5441ed265dc0824977