commit bca5cd78fe14292079e2ffd63912f51e974c7fc3
author Tri Vo <trong@google.com> Mon Apr 16 14:27:10 2018 -0700
committer Tri Vo <trong@google.com> Mon Apr 16 14:33:53 2018 -0700
tree 98a0460e7098217f2c2987e90647ba5a99100ec2
parent c1903ad3d65a04fab97268db3a2782697b0bbfc4

Exclude /mnt/vendor from vold's ownership.

Addresses this selinux denial:
avc: denied { search } for name="vendor" dev="tmpfs" ino=11069
scontext=u:r:vold:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir
permissive=0

Bug: 64905218
Test: fixes above denial.
Change-Id: I670b2148e65c7e0fcabd1e11f5bace0c4f4e18bd

VolumeManager.cpp

diff --git a/VolumeManager.cpp b/VolumeManager.cpp
index 5e6e74f..8c32587 100644
--- a/VolumeManager.cpp
+++ b/VolumeManager.cpp
@@ -623,8 +623,9 @@
     mntent* mentry;
     while ((mentry = getmntent(fp)) != NULL) {
         auto test = std::string(mentry->mnt_dir);
-        if (android::base::StartsWith(test, "/mnt/")
-                || android::base::StartsWith(test, "/storage/")) {
+        if ((android::base::StartsWith(test, "/mnt/") &&
+             !android::base::StartsWith(test, "/mnt/vendor")) ||
+            android::base::StartsWith(test, "/storage/")) {
             toUnmount.push_front(test);
         }
     }