• Stephen Smalley's avatar
    Set SELinux contexts on device nodes created by vold. · 684e6625
    Stephen Smalley authored
    
    
    Extend vold to look up and set SELinux contexts on the
    device nodes it creates for extra loop devices and for volumes.
    Prior to this change, these device nodes simply inherited the type
    of their parent directory /dev/block, i.e. block_device, and vold
    therefore required create_file perms to block_device:blk_file.
    With this change we can scope vold down to accessing specific
    block device types.
    
    This depends on change Id3bea28f5958086716cd3db055bea309b3b5fa5a
    to allow vold to use setfscreatecon().
    
    Change-Id: Ib9e8294abb1da94d92503947603ec12e802ff08c
    Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
    684e6625
sehandle.h 740 Bytes