Gitiles
Code Review Sign In
review.shift-gmbh.com / SHIFTPHONES / android_system_vold / 684e662502a310868da052192b80604234b66711
commit684e662502a310868da052192b80604234b66711[log] [tgz]
authorStephen Smalley <sds@tycho.nsa.gov>Tue Sep 30 10:29:24 2014 -0400
committerStephen Smalley <sds@tycho.nsa.gov>Tue Sep 30 15:35:28 2014 -0400
tree9e635248d15b9e0ddfc61c659577b406c7334707
parent6efa9351a257edc53ce07eb8c544ccf08efb64ae [diff]
Set SELinux contexts on device nodes created by vold.

Extend vold to look up and set SELinux contexts on the
device nodes it creates for extra loop devices and for volumes.
Prior to this change, these device nodes simply inherited the type
of their parent directory /dev/block, i.e. block_device, and vold
therefore required create_file perms to block_device:blk_file.
With this change we can scope vold down to accessing specific
block device types.

This depends on change Id3bea28f5958086716cd3db055bea309b3b5fa5a
to allow vold to use setfscreatecon().

Change-Id: Ib9e8294abb1da94d92503947603ec12e802ff08c
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
4 files changed
tree: 9e635248d15b9e0ddfc61c659577b406c7334707
  1. tests/
  2. Android.mk
  3. Asec.h
  4. CleanSpec.mk
  5. CommandListener.cpp
  6. CommandListener.h
  7. cryptfs.c
  8. cryptfs.h
  9. Devmapper.cpp
  10. Devmapper.h
  11. DirectVolume.cpp
  12. DirectVolume.h
  13. Ext4.cpp
  14. Ext4.h
  15. Fat.cpp
  16. Fat.h
  17. fstrim.c
  18. fstrim.h
  19. hash.h
  20. Loop.cpp
  21. Loop.h
  22. main.cpp
  23. NetlinkHandler.cpp
  24. NetlinkHandler.h
  25. NetlinkManager.cpp
  26. NetlinkManager.h
  27. Process.cpp
  28. Process.h
  29. ResponseCode.cpp
  30. ResponseCode.h
  31. sehandle.h
  32. vdc.c
  33. VoldCommand.cpp
  34. VoldCommand.h
  35. VoldUtil.c
  36. VoldUtil.h
  37. Volume.cpp
  38. Volume.h
  39. VolumeManager.cpp
  40. VolumeManager.h
  41. Xwarp.cpp
  42. Xwarp.h